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calls, tracking, routing, people and animal location including applications for cctmnement to and from certain areas. 
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LOCATION OF A MOBILE STATION USING A PLURALITY OF COMMERCIAL 
WIRELESS INFRASTRUCTURES 

RELATED FIELD OF THE INVENTION 

The present invention is directed general!/ to a system and method for locating people or objects, and in particular to a 
system and method for beating a wireless mobile radio station in a macro base station, distributed antenna, or home base station 
environment. 

BACKGROUND OF THE INVENTION 

Wireless communications systems are becoming increasingly important worldwide. Wireless cellular telecommunications 
systems are rapidly replacing conventional wire-based telecommunications systems in many applications. Commercial mobile radio 
service provider network, and specialized mobile radio and mobile data radio networks are examples. The general principles of 
wireless cellular telephony have been described variously, for example in U. S. Patent 5 ,295,180 to Vendetti, et al, which is 
incorporated herein by reference. There is great interest in using existing infrastructures for wireless communication systems for 
beating people anaVbr objects in a cost-effective manner. Such a capability would be invaluable in a variety of situations, 
especially in emergency or crime situations. Due to the substantial benefits of such a location system, several attempts have been 
made to design and implement such a system. Systems have been proposed that rely upon signal strength and trilateralization 
techniques to permit location indude those disclosed in Ui. Patents 4,818,998 and 4,908,629 to Apsell et aL ("the Apsell 
patents") and 4391,650 to Sheffer ("the Sbeffer patent*). The Apsell patents disclose a system employing a "homing-in n scheme 
using radio signal strength, wherein the scheme detects radio signal strength transmitted from an unknown location. This signal 
strength is detected by nearby tracking vehicles, such as police cruisers using receivers with directional antennas. Alternatively, the 
Sheffer patent discloses a system using the FH analog cellular network. This system includes a mobile transmitter bated on a 
vehicle to be looted. The transmitter transmits an alarm signal upon actuation to detectors looted at base stations of the cellular 
network. These detectors receive the transmitted signal and transmit, to a central station, data indicating the signal strength of the 
received signal and the identity of the base stations receiving the signal This data is processed to determine the distance between 
the vehicle and each of the base stations and, through ^lateralization, the vehicle's position. However, these systems have 
drawbacks that indude high expense in that special purpose electronics are required. Furthermore, the systems are generally only 
effective in line-of-sight conditions, such as rural settings. Radio wave surface reflections, refractions and ground clutter cause 
significant distortion, in determining the location of a signal source in most geographical areas that are more than sparsely 
populated. Moreover, these drawback are particularly exacerbated in dense urban canyon (chy) areas, where errors and/or 
conflicts in location measurements on resuh m substantia) hoccnrKies. 
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Another example of a location system using time of arrival and triangulation for location are satellhe-based systems, 
sucb as the military and commercial version* of the Global Positioning Satellite system (GPS). GPS can provide accurate position 
determination (It, about 100 meters error for the commercial version of GPS) from a time-based signal received simultaneously 
from at least three satellites. A ground-based GPS receiver at or near the object to be bated determines the difference between 
5 the time at which each satellite transmits a time signal and the time at which the signal is received and, based on the time 

differentials, determines the object's location. However, the GPS is impractical m many applications. The signal power levels from 
the satellites are low and the GPS receiver requires a dear, line-of-sight path to at least three satellites above a horizon of about 60 
degrees for effective operation. Accordingly, inclement weather conditions, such as clouds, terrain features, such as hills and trees, 
and buildings restrict the ability of the GPS receiver to determine its position. Furthermore, the initial GPS signal detection process 
10 for a GPS receiver is relatively long (Le, several minutes) for determining the receiver's position. Such delays are unacceptable in 
many applications such as, for example, emergency response and vehicle tracking. 

Differential GPS, or DQ*S systems offer correction schemes to account for time synchronization drift. Such correction 
schemes indude the transmission of correction signals over a two-way radio link or broadcast via PM radio station subcarriers. 
These systems have been found to be awkward and have met with limited success. 
IS Additionally, GPS-based location systems have been attempted in which the received GPS signals are transmitted to a 

central data center for performing location calculations. Such systems have also met with limited success due, for example, to the 
limited reception of the satellite signals and the added expense and complexity of the electronics required for an inexpensive 
location mobile station or handset for detecting and receiving the GPS signals from the satellites. 

The behavior of a mobile radio signal in the general environment is unique and complicated. Efforts to perform 
20 correlation between radio signals and distance between a base station and a mobile station are similarly complex. Repeated 

attempts to solve this problem in the past have been met with only marginal success. Factors include terrain undulations, fixed and 
variable dutter, atmospheric conditions, internal radio characteristics of cellular and PO systems, such as frequencies, antenna 
configurations, modulation schemes, diversity methods, and the physical geometry of direct, refracted and reflected waves between 
the base stations and the mobile. Noise, such as man-made externally sources (cg„ auto ignitions) and radio system co-channel 
25 and adjacent channel interference also affect radio reception and related performance measurements, such as the analog carrier-to- 
interference ratio (C/l), or digital energy-per-bh/Hoise density ratio (E^) and are particular to various points in time and space 
domains. 

Before discussing real world correlation between signals and distance, it is useful to review the theoretical premise, that 
of radio energy path loss across a pure isotropic vacuum propagation channel, and its dependencies within and among various 
30 communications channel types. 

Over the to forty years various mathematical expressions have been developed to assist the radio mobile cell designer in 
establishing the proper balance between base station capital investment and the quality of the radio link, typically using radio 
energy field-strength, usually measured m mkrovohs/reeter, or decibels. 
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One consequence from a location perspective is that the effective range of values for higher exponents is an increased at 
higher frequencies, thus providing improved granularity of ranging correlation. 

Actual data collected in real-work) environments uncovered huge variations with respect to the free space path loss 
equation, giving rise to the creation of many empirical formulas for radio signal coverage prediction. Gutter, either fixed or 
S stationary in geometric relation to the propagation of the radio signals, causes a shadow effect of blocking that perturbs the free 
space loss effect Perhaps the best known model set that characterizes the average path loss is Hata's, "Empirical formula for 
Propagation Loss in Land HobHe Radio", H. Hata, IEEE Z/a/iBnw/tf VT-29, pp. 317-315, August 1980, three pathtoss models, based 
on Okumura's measurements in and around Tokyo, "Field Strength and its Variability in VHf and IMF Land Mobile Service", Y. 
Gkumura, et al. Review of r the Ekctr&ltommunkathmhboramryM 16, pp 825-873. Sept. - Oct 1968. 

10 Although the Hata model was found to be useful for generalized RF wave prediction in frequencies under I GHz in 

certain suburban and rural settings, as either the frequency and/or d utter increased, predictability decreased. In current practice, 
however, field technicians often have to make a guess for dense urban an suburban areas (applying whatever model seems best), 
then installing a base stations and begin taking manual measurements. 

In 1991, Ui. Patent 5,055,851 to Sheffer taught that if three or more relationships lave been established in a triangular 

15 space of three or more base stations (BSs) with a location database constructed having data related to possible mobile station (MS) 
locations, then arcubdon calculations may be performed, which use three distinct P w measurements to determine an X,Y, two 
dimensional location, which can then be projected onto an area map. The translation calculation is based on the fact that the 
approximate distance of the mobile station (HS) from any base station (BS) cell can be calculated based on the received signal 
strength. Sheffer acknowledges that terrain variations affect accuracy, although as noted above, Shelter's disclosure does not 

20 account for a sufficient number of variables, such as fixed and variable location shadow fading, which are typical in dense urban 
areas with moving traffic 

Host field research before about 1988 has focused on characterizing (with the objective of RF coverage prediction) the RF 
propagation channel (Le n electromagnetic radio waves) using a single-ray model although standard fit errors in regressions 
proved dismal (e^., 40-80 dB). Later, multi-ray models were proposed, ami much later, certain behaviors were studied with radio 

25 and digital channels. In 1981, Vogkr proposed that radio waves at higher frequencies could be modeled using optics principles. In 
1988 Walfisch and Bertoni applied optical methods to develop a two-ray model, which when compared to certain highly specific, 
controlled field data, provided extremely good regression fit standard errors of within 1 1 dB. 

In the Bertoni two ray model it was assumed that most cities would consist of a core of high-rise buildings surrounded 
by a much larger area having biddings of uniform height spread over regions comprising many square blocks, with street grids 

30 organizing buildings into rows that are nearly paralleL Rays penetrating buildings then emanating outside a building were 
neglected. 

After a lengthy aiolpa k was factors: I.) the path bss between 

antennas in free space; 1) the reduction of rooftop wave fields due to settling; and 3.) the effect of diffraction of the rooftop fields 
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down to ground level. 

However, a substantial diffkuhy with the two-ray model io practice is that it requires a substantial amount of data 
regarding building dimensions, geometry, street widths, antenna pin characteristics (or every possible ray path, etc Additionally, 
it requires an inordinate amount of computational resources and such a model is not easily updated or maintained. 

S Unfortunately, in practice dutter geometry and building heights are random. Moreover, data of sufficient detail is 

extremely difficult to acquire, and regression standard fit errors are poor; Le„ in the general case, these errors were found to be 40- 
60 dB. Thus the two-ray model approach, although sometimes providing an improvement over angle ray techniques, still did not 
predict RF signal characteristics in the general case to level of accuracy desired ( < I OdB). 

Work by Greenstein has once developed from the perspective of measurement-based regression models, as opposed to the 

10 previous approach of predkriog-ftrst, then performing measurement comparisons. Apparently yielding to the fact that low-power, 
low antenna (tg^ 12-25 feet above ground) height PCS mkrocell coverage was insufficient in urban buildings, Greenstein, et at, 
authored "Performance Evaluations for Urban Line-oi-sigbt Mioocelb Using a Multi-ray Propagation Model", in IEEE Globecom 
Proceedings, 12/91. This paper proposed the idea of formulating regressions based on field measurements using small PCS 
mkrocetls in a lineal mkrocell geometry (Le., geometries in which there is afways a line-of-sight path between a subscriber's mobile 

15 and its current mkrosite). Additionally, Greenstein studied the communication channels variable Bit-Error-Rate (BER) in a spatial 
domain, which was a departure from previous research that limited field measurements to the RF propagation channel signal 
strength alone. However, Greenstein based his finding on two suspicious assumptions: I) he assumed that distance correlation 
estimates were identical for uplink and downftnk transmission paths; and 2) modulation techniques would be transparent in terms 
of improved distance correlation conclusions. Although some data held very correlation, other data and environments produced 

20 poor results. Accordingly, his results appear unreliable for use in general location context. 

In 1993 Greenstein, et a|» authored M A Heasurement-Based Model for Predicting Coverage Areas of Urban Hicrocells", in 
the IEEE Journal On Selected Areas in Communications, Vol. 1 1 , Ho. 7, 9/93. Greenstein reported a generic measurement-based 
model of RF attenuation in terms of constant-value contours surrounding a given low-power, low antenna mkrocell environment in 
a dense, rectilinear neighborhood, such as New York Qty. However, these contours were for the cellular frequency band. In this 

25 case, LOS and non-LOS dutter were considered for a given mkrocell site. A result of this analysis was that RF propagation bsses 
(or attenuation), when all antenna heights were relatively low, provided attenuation contours resembling a spline plane curve 
depicted as an asteroid, aligned with major street grid patterns. Further, Greenstein found that convex diamond-shaped RF 
propagation loss contours were a common occurrence in field measurements in a rectilinear urban area. Tbe special plane curve 
asteroid is represented by the formula: 

30 x w + y w = r M . However, these results alone have not been sufficiently robust and general to accurately locate an 

mobile station, due to the variable nature of urban dutter spatial arrangements. 

At Telesis Technology io 1994 Howard X'o, et al, authored "Hkrocellular Propagation Characteristics for Personal 
Communications in Urban and Suburban Environments", in IEEE Transactions of Vehicular Technology, VoL 43, No. 3, 8/94, whkh 
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perforated raeasranents sjacifaaUy in the PO I £ to 1.9 GHz frequency hand. Xia found corresponding but more variable 
outcome result* in San Francisco. Oakland (urban) and the Sunset and H'ssioo Districts (suburban). 

The physical radio propagation channel perturbs signal strength, frequency (causing rate changes, phase delay, signal to 
noise ratios ftg, C/l for the analog case, or r^, , RF energy per bh, over average noise density ratio for the digital case) and 
S Doppkr-shif L Signal strength is usually characterized by: 

• Free Space Path loss (l^ 

• Stew fading toss or margin (LjJ 

• Fast fading loss or margin (l^t) 

10 The cell designer increases the transmitted power P w by the shadow fading margin L*, which is usually chosen to be 

within the 1-2 percentile of the slow fading probability density function (PDF) to minimize the probability of unsatisfactorily low 
received power revel P H at the receiver. The P„ level must have enough signal to noise energy level (e.g JO dB) to overcome the 
receiver's internal noise level (e.g, -IISdBm in the case of cellular 0.9 GHz), for a minimum voice quality standard. Thus m this 
example P n must never be below -108 dBm, in order to maintain the quality standard. 

15 Additionally the short term fast signal fading due to multipart propagation is taken into account by deploying fast 

fading margin L^, which is typically also chosen to be a few percentiles of the fast lading distribution. The I to 2 percentiles 
compliment other network blockage guidelines. For example the cell base station traffic loading opacity and network transport 
facStJes are usually designed for a 1-2 percentile blockage factor as welL However, in the worst-case scenario both fading margins 
are shrrahaneously exceeded, thus causing a fading margin overload. 

20 In Roy Steele's, text, Hobtk Radio QummmiothiB, IEEE Press. 1992, estimates for a GSH system operating in the 1.8 

GHz band with a transmitter antenna height of. Mm and a mobile station receiver antenna height of 2m, and assumptions 
regarding total path km,traramitter power would be calculated as follows: 


Table I: GSM Power Budget Example 


Parameter 

dBm value 

Will require 

Ljow 

14 


Mast 

7 


"path 

110 


Mm. RXpwr required 

•104 




TXpwr = 27dBm 


s 
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Steele's sample size in a specific urban London area of 80,000 LOS measurements and data reduction found a stow 
fading variance of 

r a= 7dB 

assuming log-normal slow lading PDF and allowing for a 1.4% slow fading margin overload, thus 
slow = 2o = 14dB 

10 

The fast fading margin was determined to be: 

'5 In contrast, Xia's measurements in urban and suburban California at 1.8 GHz uncovered flat-land shadow fades on the 

order of 25-30 dB when the mobile station (MS) receiver was traveling from LOS to non-LOS geometries. In hilly terrain fades of 
+5 to -50 dB were experienced. Thus it is evident that attempts to correlate signal strength with mobile station ranging distance 
suggest that error ranges could not be expected to improve below 14 dB, with a high side of 25 to 50 dB. Based on 20 to 40 dB per 
decade, Corresponding error ranges for the distance variable would then be on the order of 900 feet to several thousand feet, 

20 depending upon the particular environmental topology and the transmitter ami receiver geometries. 

Although the acceptance of fuzzy tog* has been generally more rapid in non-American countries, the principles of fuzzy 
logic an be applied in wireless location. Lotfi A. Zadeh's article, -fuzzy Sets" published in 1965 in Information ami ' Control vol. 8, 
Pg 338-353, herein incorporated by reference, established the basic principles of fuzzy logic, among wltich a key thorem, the FAT 
theorem, suggests that a fuzzy system with a finite set of rules can uniformly approximate any continuous (or Borel-measureable) 
25 system. The system has a graph or curve in the space of all combinations of system inputs and outputs. Each fuzzy rule defines 2 
patch in this space. The more uncertain the rale, the wider the patch. A finite number of small patches can always cover the curve. 
The fuzzy system averages patches that overlap. The Fat theorem was proven by Bart Kosko, in a paper entitled, M Fuzzy Systems as 
Universal Approximators", in Pnxttdhgs of the first IEEE Conkrme onftozfSymms, Pages 1 153-1 162, in San Diego, on March, 
1992, herein incorporated by reference. 

30 Fuzzy relations map elements of one universe, say T, to those of another universe, say T\ through the Cartesian 

product of the two universes. However, the "strength" of the relation between ordered pain of the two universes is not measured 
with the characteristic function (in which an element is either definitely rebated to another elemetn as indicated by a strength 
value of T, or is definitely not related to another element as indicated by a strength value of "0". but rather with a membership 
function expressing various "degrees" of strength of the rebtioo on the unit mtergval [0J]. Hence, a fuzzy relation R is a 
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capping from the Cartesian spaa X x Y to the interval [0,1], where the strength of the mapping is expressed by the membership 
function of the relation for ordered pairs from the two universes or ^x,y). 

Just as for crisp relations, the properties of commutativity, associativity, distributivtty, involution ami idempotency all 
bold for fuzzy relations. Moreover, DeHorgan's laws hold for fuzzy relations just as they do for crisp (classical) relations, and the 
S noli relations 0, and the complete relation, E, are analogous to the null set and the whole set in set-theretic from, respectively. The 
properties that do not bold for fuzzy relations, as is the case for fuzzy sets in general, are the excluded middle laws. Since a fuzzy 
relation R is also a fuzzy set, there b overlap between a relation and its complement, hence. 

RoRVE 

RnR^O 

10 As seen in the foregoing expression, the excluded middle laws lor relation do rot result in the null relation. 0, or the 

complete relation, E. Because fuzzy relations in general are fuzzy sets, the Cartesian product can be defined as a relations between 
two or more fuzzy sets. Let A be a fuzzy set on universe X and B be a fuzzy set on universe Y; then the Cartesian product between 
fuzzy sets A and B will result in a fuzzy relation R, which is contained within the full Cartesian product space, or 

AxB = Rc XiY 

I S where the fuzzy relation R has membership function: 

tofct) = UfaBfaO = »wn (H*(x),^(y)) 

fuzzy composition can be defined just as it is for crisp (binary) relations. If R is a fuzzy relation on the Cartesian space 
XxY, and Sis a fuzzy relation on the Cartesian space YxZ, and T is a fuzzy relation on the Cartesian space XxZ; then fuzzy 
roax-min composition is defined in terms of the set-theoretic notation and membership function-theoretic notation in the following 
20 manner. 

tofcf) = v (m(x,y) a m(x,y)) = max { min [^y), MsM ] } 

The fmiy extension principle allows for transforms or mappings of fuzzy concepts in the form y - f (z). This principle, 
combined with a composhhml rok of inference, allows for a crisp input to be mapped through a fuzzy transform using 
membership functions into a crisp output Additionally , in napping a ariaUe x into a variale y, both x and y can be vector 
25 quantities. 


7 


SUBSTITUTE SHEET (RULE 26) 


WO 98/10538 


PCT/US97/15933 


SUMMARY OF THE INVENTION 

OBJECTS OF THE INVENTION 

It is an objective of the present invention to provide a system and method for determining wireless location using one or 
S more commercial mobile radio telecommunication systems for accurately looting people and/or objects in a cost effective manner. 
Related objectives for the present invention include providing a system and method that: 

(1) can be readily incorporated into existing commercial wireless telephony systems with lew, if any, modifications of a 
typical telephony wireless infrastructure; 

(2) can use the native electronics of typical commercially available telephony wireless mobile stations (e.g., handsets) as 
10 location devices; 

(3) on be used for locating people and/or objects residing indoors. 

Yet another objective is to provide a low cost location system and method, adaptable to wireless telephony systems, for 
using simultaneously a plurality of base stations owned and/or operated by competing commercial mobile radio service providers 
within a common radio coverage area, in order to achieve FCC phase 2 accuracy requirements, and for synergistically increasing 
IS mobile station location accuracy and consistency. 

Yet another objective is to provide a low cost location system and method, adaptable to wireless telephony systems, for 
using a plurality of location techniques In particular, at least some of the following mobile station location techniques can be 
utilized by various embodiments of the present invention: 

•time-of-arrival wireless signal processing techniques; 
20 •time^ttference-of-arrival wireless signal processing techniques; 

•wireless signal processing techniques. 

Yet another objective is to provide a system and method for flexible delivery of location information to Public Safety 
Answering Points, end users, centralized dispatchers, as well as to agents (either human or mechanized) associated with trigger- 
based inventory and tracking systems, flexible delivery used here indicates providing location via various two dimensional closed- 
25 form shapes, such as polygons, elfipses, etc, which bound the location probabilities. In cases where height location information is 
known, the bounding shape may be three-dimensional 

Yet another objective is to provide a system ami method for a variety of new location-based services for public and 
private group safety, including family support functions. 

Yet another objective is to provide a system and method for National Scale Wireless Location capability. Although the 
30 primary focus of this patent is to provide wireless location with accuracy to meet the FCC phase two requirements, a system and 
method is provided that also utilizes roaming signaing to determine in which city is a particular wireless mobile station located. 
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Yet another objective is to provide and system and method for Parametric-driven, intelligent agent-based location 
services. Parameters may mdude time, location, and user-specific and/or group specific criteria. 

Yet another objective is to provide a system and method for determining and/or enhancing wireless location using one 
or more of the fotowing: (a.) CDMA-based Distributed Antenna technology; (b.) Home Base Stations and AIH technology. 
S Yet another objective is to provide notification messages and/or voice-synthesized all or text paging f unction to a 

plurality of other mobile station users when a mobile station user travel into, or away from, one or more zones or are within short 
distances of shopping malls, stores, merchandising dealers etc 

Yet another objective is to provide notification messages and/or voice-synthesized call or text paging functions to a 
plurality of other mobile station users when a mobile station dials a redefined telephone number, such as 91 1, or a type of "mild 
1 0 emergency ay for help' number. 

Yet another objective is to provide notification messages and/or voice-synthesized all or text paging function to a 
plurality of other mobile station users when a mobile station user dials a predefined telephone number, such as 31 1, or a type of 
mild emergency cry for help number, wherein the plurality of other mobile station users are within a particular distance, or a 
minimum distance to the mobile station user who dialed the predefined number. 
15 Yet another objective is to provide notification messages and/or voice-synthesized call or text paging funaion to a 

plurality of other mobile station users when a mobile station user dials a predefined telephone number, such as 3 1 i , or a type of 
traH emergency cry for help number, wherein the plurality of other mobile station users are within a particular distance, or a 
minimum distance to the mobile station user who dialed the predefined number, and wherein the other mobile station users are 
provided individualized directional or navigation information from their current locations, to reach to the mobile station user who 
20 dialed the predefined number. 

Yet another objective is to provide automatic home office, vehicle and boat security functions, which are activated and 
deactivated based on a mobile station user's location to or away from a location associated with the security functions. 

Yet another objective is to provide notifications (eg., via fax, page, e-mail, text paging or voice synthesized call 
message), or to setup a group conference call capabi&ty to a plurality of predefined individuals, based on a mobile station user's 
25 call to 91 1, or based on a mobile station user's traveling into or away from a location zone or area, or based upon a sensor input 
signal to the user's mobile station, such as a sudden change in G forces, such as faffing down, having the car hit another object 
suddenly, air bag deployment, etc 

Yet another objective is to provide location information to a 'searcher* mobile station user who then further refines or 
narrows the scope of the location/search for a 'target* mobile station, or the mobile station to be looted, using a small microwave 
30 dish, in communication with, or to supplement/replace the searcher mobile station antenna, whose physical orientation is used to 
further determine the target mobile station location, relative to the searcher's mobile station position/orientation 

Yet another objective is to provide a means to allow more flexible storage, inventory and enhanced user accessibility of 
rental vehkfes, by combining location technology of rental car driver canying his/her own mobile station, along with a mobile 
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statbft which remains always active and Toed to a rental car. By maintaining accurate location record* of rental car locations and 
automatic, remote-control of rental cars (or smart cars) which use the mobile station to telemeter control data to and from the car, 
whose doors, doortado, and general accessibility are controlled by a centralized computer system, rental can an be dropped off at 
convenient shopping center noils, airport parking lots, hotels and at other convenient bottom. 
S Yet another objective is to provide location estimates to users carrying mobHe stations, via voice synthesis, data circuit 

messaging or text paging. 

Yet another objective is to provide a mechanism whereby mobile station users may access and control their subscriber 
profile for location purposes. The location subscriber profile is a persistent data store which contains logic regarding under what 
criteria will that mobile station user allow his/her location to be made known, and to whom. The mobile station user may access the 
1 0 location profile via several methods, including Internet means, and mobile station handset keypad entry and voice recognition 
circuits. 

Yet another objective is to utilize signaling detection characteristics of other CDMA base stations and systems in a given 
area, owned and operated by a plurality another commercial mobile radio service provider (CHRS provider). By including other 
CHRS providers* infrastructure in the location estimation analysis process, improvements in location accuracy an be realized. 

15 

DEFINITIONS 

The following definitions are provided for convenience. In general, the definitions here are also defined elsewhere in 
this document as welL 

(1 ) The term wireless herein is, in general, an abbreviation for digital wireless, and in particular, wireless refers to digital 
20 radio signaling using one of standard digital protocols such as CDMA, TDMA and GSH, as one skilled in the art will understand. 

(2) As used herein, tbe term roobih station (eqravakntty, MS) refers to a wireless device that is at least a transmitting 
device, and in most cases is also a wireless receiving device, such as a portable radio telephony handset Note that in some contexts 
herein instead or in addition to mobile station, the following terms are also used: personal station (PS), and totaiton unit (LU). In 
general, these terms may be considered synonymous. However, the later two terms nay be used when referring to reduced 

25 functionality communication devices in comparison to a typical digital wireless mobile telephone. 

(3) Tbe term, infrastructure, denotes the network of telephony communication services, and more particularly, that portion 
of such a network that receives and processes wireless communications with wireless mobile stations. In particular, this 
infrastructure includes telephony wireless base stations (BS) such as those for radio mobile communication systems based on CDMA, 
TDHA, and GSH wherein the base stations provide a network of cooperative communication channels with an air interface with the 

30 mobile station, and a conventional tetommuniatiora interface with a Mobile Switch Center (HSC). Thus, an MS user within an 
area serviced by the base stations may be provided with wireless communication throughout the area by user transparent 
communication transfers (Le^ hand-offs) between tbe user's mobile station ami these base stations in order to maintain effective 
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telephony smite. The mobile switch center provides communications and control cooneawity among base stations and the poblic 
telephone network. 

(4) An example of a Paranetrfc-drivoi intelligent ageot-based location service follows: An intelligent agent software process 
monitors sets of Parametric conditions and location scenarios. When appropriate conditions and location criteria are satisfied, then 
a set of notifications or other actions are triggered to occur. A specific example follows: given that a certain child carrying a mobile 
station should be in a certain school between 8.-00 AA and 3:00 PA on regular school days, then a wireless location request is 
invoked periodically, within the school day time frame. If a location request determines that the child's mobile station is located 
substantially outside ol the general school area, then a parent/guardian is notified of that fact, and of the child's location via any 
of several methods, such as: (a.) a voice-synthesized telephone message, (b.) various extranet/internet means, such as electronic 
mail, retailing, such as the product Castanet, by Marimba Software, Inc. (c) fax to a predetermined telephone number, or (d.) 
alpha-numeric text paging. 

(5) Commercial mobile radio service (CURS) service provider is the referenced name of the company that owns and/or 
operates a pubfidy accessible wireless system in the cellular or PC spectrum radio bands. 

SUMMARY DISCUSSION 

The location system of the present mention accompfishes the above and other objectives by the following sups: 

(I .) receiving signal data measurements corresponding to wireless communkat'ions between an mobile station to 
be located (herein also denoted the target mobile station) and a wireless telephony infrastructure, wherein the mobile station. BS 
and/br nobfe switch center may be enhanced in certain novel and cost effective ways so as to provide an extended number of 
values characterizing the wireless signal oramimications between the target mobile station and the base station infrastructure, 
such 'infrastructure including multiple, distinct CURS where base stations share a common coverage area; 

(L) organizing and processing the signal data measurements received from a giveo target mobile station and 
surrounding base stations so that composite wireless signal characteristic values may be obtained from which target mobile station 
location estimates may be derived, to particular, the signal data measurements are ensembles of samples from the wireless signals 
received from the target mobile station by the base station infrastructure, and from associated base stations wherein these samples 
are subsequently filtered using anabg and digital spectral filtering. ($.) providing the resultant location estimation characteristic 
values to a mobiie station location estimate module, wherein each such model subsequently determines the estimate of the location 
of the target mobile station based on, for example, the signal processing techniques I. through 1 above. 

Accordingly, steps (I.) and (L) above are performed by a subsystem of the invention denoted the Signal Processing and 
filtering Subsystem (or simply the Signal Processing Subsystem). In particular, this subsystem receives samples of wireless signal 
characteristic measurements such as a plurality of rebtive signal strengths and corresponding signal time delay value pairs. 
wDeremsticbsantplesanusdbythtss 

sample by the short time deby value, wherein each such value pair a associated with wireless signal traramtssiom between the 
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target mobile station and a particular base station of a predetermined wire tea base station infrastructure. Extremely transient 
ngnaj anomafies such as signal reflection from tree leaves or the passing of a truck are likely to be filtered oot by the Signal 
Processing Subsystem For example, such an ensemble of data value pain can be subjected to input cropping and various median 
filters employing filtering techniques such as convolution, median digital, Fast Fourier transform, Radon transform, Gabar 
transform, nearest ne'jhbor, histogram equalization, input and output cropping, Sobel, Wiener, and the like. 

ft is a further aspect of the present invention that the wireless personal communication system (PCS) irrf rastructures 
currently being developed by telecommunication providers offer an appropriate localized infrastructure base upon which to build 
various personal location systems employing the present invention and/or utilizing the techniques disclosed herein, in particular, 
the present invention is especially suitable for the location of people and/or objects using code division multiple access (CDMA) 
wireless infrastructures, although other wireless infrastructures, such as, time division multiple access (TDHA) inf restructures and 
GSM are abo contemplated. Note that (DMA personal communications systems are described in the Telephone Industries 
Association standard IS-9S, for frequencies below I GHz, and in the Wideband Spread - Spectrum Digital Cellular System Dual-Mode 
Mobile Station-Base Station Compatibility Standard, for frequencies in the IJ-1.9 GHz frequency bands, both of which are 
incorporated herein by reference. Furthermore, CDMA general principles have also been described, for example, in U. S. Patent 
5,109390, to GHhausen, et al, and CDMA Network Engineering Handbook by Qualcomm, Inc, each of which is also incorporated 
herein by reference. 

In another aspect of the present invention, in environments where a home base station capability exists, then wireless 
location can be provided under certain circumstances, wherein when a mobile station user is within a predetermined range of, for 
example, 1000 feet of his/her premises, the user's mobile station is detected through mobile station receiving electronics provided 
in, for example, cordless telephone units as being at home. Thus, the local public telephone switching network may be provided with 
such information for register^ that user is at home, and therefore the mobile station may be allowed to function as a cordless 
borne telephone utifizing the local public telephone switching network instead of the base station inf restructure. According to this 
aspect of the present invention, the location center of the present invention receives notiftatioo from the local public switched 
telephone network that the mobile station is at or near home and utilizes this notification in outputting a location estimate for the 
mobile station. 

In yet another aspect, the present invention includes a capability for locating a target mobile station within areas of 
poor reception for infrastructure base stations by utilizing distributed antennas. A distributed antenna system as used herein is a 
©flection of antennas attached in series to a reduced function base station, wherein the antennas are distributed throughout an 
area for improving telephony coverage. Such distributed antenna systems are typically used in indoor environments (e.g„ high rise 
buildings) or other areas wherein the signal to noise ratio is too high for adequate communication with standard infrastructure 
base stations. Abo a distributed antenna system may be located such that its coverage pattern overlaps the area of coverage of 
another distributed antenna system. In such cases each of the overlapping distributed antenna systems includes purposeful delay 
elements to provide different signal delays for each of the overlapping antenna systems and thereby provide muhipath signals with 
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sufficient delay spread for signal discrimination, as one skilled in the art will understand. Accordingly, the present invention 
receives and utilizes location information communicated from distributed antenna systems for looting a target mobile station. 
That is, the present invention may receive information from the base station infrastructure indicating that a target mobile station is 
communicating with such a distributed antenna system and provide distributed antenna signal characteristic values related to the 
S distributed antenna system. Accordingly, to process such target mobile station location signal data, the present invention includes a 
distributed antenna system for generating target mobile station location estimate derived from the location signal data obtained 
from the distributed antenna system. 

The location system of the present invention offers many advantages over existing location systems. The system of the 
present invention, for example, is readily adaptable to existing wireless communication systems and can accurately locate people 
10 andA>r objects in a cost-effective manner. In particular, the present invention requires few, if any, modifications to commercial 
wireless communication systems for implementation. Thus, existing personal communication system infrastructure base stations 
and other components of, for example, commercial CDMA infrastructures are readily adapted to the present invention. The present 
invention can be used to locate people and/br objects that are not in the line-of-sight of a wireless receiver ortransmitter, on 
reduce the detrimental effects of multipart! on the accuracy of the location estimate, can locate people and/or objects located 
IS indoors as well as outdoors, and uses a number of wireless stationary transceivers for location. The present invention employs a 
number of distinctly different location computational models for location which provides a greater degree of accuracy, robustness 
and versatility than is possible with existing systems. For instance, the location models provided indude not only the radius- 
radius/TQA and TDOA techniques but also adaptive neural net techniques. Further, the present invention is able to adapt to the 
topography of an area in which location service is desired. The present invention is also able to adapt to environmental changes 
20 substantially as frequently as desired. Thus, the present invention is able to take into account changes in the location topography 
over time without extensive manual data manipulation. 

Moreover, there are numerous additional advantages of the system of the present invention when applied in CD HA 
communication systems. The location system of the present invention readily benefits from the distinct advantages of the CDHA 
spread spectrum scheme, namely the expbitatioo of radio frequency spectral efficiency and isolation by (a) monitoring voice 
25 activity, (b) management of two-way power control, (c) provision of advanced variable-rate modems and error correcting signal 
encoding, (d) inherent resistance to lading, (e) enhanced privacy, and (0 multiple "rake* digital data receivers and searcher 
receivers for correlation of signal multipaths. 

Additionally, note that this architecture need not have all modules co-located. In particular, it is an additional aspect of 
the present invention that various modules tan be remotely located from one another and communicate with one another via 
30 telecommunication transmissions such as telephony technologies and/or the Internet Accordingly, the present invention is 

particularly adaptable to such distributed computing environments. For example, some number of the location center modules may 
reside in remote locations and communicate their generated hypotheses via the Internet 

In an alternative embodiment of the present invention, the processing following the generation of location estimates by 
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the modules may be such that this processing can be provided on Internet user nodes and the modules may reside at Internet server 
sites. In this configuration, an Internet user may request hypotheses from such remote modules and perform the remaining 
processing at his/her node. 

Of course, other software architectures may also to used in implementing the processing of the location center without 
5 departing from scope of the present invention. In particular, object-oriented architectures are also within the scope of the present 

invention. For example, the modules may be object methods on an mobile station location estimator object, wherein the estimator 

object receives substantially aO target mobile station location signal data output by the signal filtering subsystem 20. 

Alternatively, software bus architectures are contemplated by the present invention, as one skilled in the art will understand, 

wherein the software architecture may be modular are) facilitate parallel processing. 
10 One embodiment of the present invention includes providing the location of a mobile station (HS) using the digital air 

interface voice channel and aB automatic call distributor device. This embodiment provides location information to either the 

initiating taller who wishes to learn of his location, using the voice channel, and/or location information could be provided to 

another individual who has either a wireline or wireless telephone station. 

Another embodiment of the present invention includes providing the location of a mobile station using the digital air 
15 interface voice channel and a hunt group provided from a central office or similar device. Thb embodiment provides location 

information to either the initiating caller who wishes to learn of bis location, using the voice channel, and/or location information 

could be provided to another individual who has either a wireline or wireless telephone station. 

Another embodiment of the present invention includes providing the location of a mobile station using the digital air 

interface teit paging, or short message service channel and a hunt group provided from a central office or simitar device. This 
20 embodiment provides location information to either the initiating caller who wishes to learn of his location, using the voice channel, 

and/or location information could be provided to another individual who has either a wireline or wireless telephone station. 

Another embodiment of the present invention includes providing the location of a plurality of mobile stations using the 

public Internet or an intranet, with either laving the ability to further use "push", or H netcasting H technology . This embodiment 

provides location information to either the initiating Internet/Intranet user who wishes to learn of one or more mobile station 
25 locations, using either the Internet or an intranet Either the mobile station user to be located can initiate a request for the user to 

be located, or an Internet/intranet user may initiate the location request Optionally the location information could be provided 

autonomously, or periodically, or in accordance with other logic criteria, to the recipient of the location information via the 

Internet or a intranet As a further option, location information an be superimposed onto various maps (e^„ bit/raster, vector, 

digital photograph, etc) for convenient display to the user. 
30 Yet another embodiment of the present invention includes providing a multicast notification to a group of mobile 

station users, based on distress ad from a particular mobile station, wherein the group of mobile station users are relatively 

nearby the distress caller. The multicast notification provides individual directions for each group mobile station user, to direct 

each ttttr to the Easiest rooie to riadi the distressed caller. 
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Further features and advantages of the present invention are provided by the figures and detailed description 
accompanying this inveation summary. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. I illustrates an overall view of a wireless location system and method for using multiple commercial mobile radio 
5 service providers; 

Fig. 2 shows is a high level wireless location architecture using the intelligent network, which illustrates aspens of the 
home base station and internet connectivity for receiving location requests and for providing location estimates; 

Fig. 3 illustrates how the signals from the base stations associated with various multiple commercial radio service 
providers can be shared with the wireless location system to provide an improved geometry and thus improved wireless location 
10 accuracy. 

Fig. 4 shows how the mobile station database in the location system is updated via interfaces in communication with 
multiple commercial mobile radio service providers using customer care systems. 

fig. 5 stows a method of direct access to multiple QMS base stations, from the location system perspective, thus 
avoiding the need to significantly modify network infrastructure systems. 
I S Figi illustrates physical components ami the effects of predetermined signal delay, and total system delay in a 

distributed antenna environment for purposes of wireless location; 

Fig. 7 shows the riming relationships among the signals within a distributed antenna system. 

Fig. 8 shows a flowchart of the methods and procedures required to implement a DA database; 

Fig. 9 illustrates an exemplary DA configuration with a direct antenna connection to the base stations; 
20 Fig. 1 0 illustrates an alternative DA configuration using multipoint microwave; 

Fig. 1 1 illustrates how multiple base stations could be used via a microwave circuit to provide PCS and location service 
to a multilevel building via virtual pilot channels; 

Fig. 12 shows the DA delay spread ranges possible for a S00 microsecond guard zone; 

Fig. 13 shows DA-celJ layout a geometry and how location geometries an be constructed; 
25 Fig .14 illustrates the realization of actual measurements and classification utilized within DA cell ranges to determine a 

percent range within each celL 

Pig. IS shows the standard components of a CDMA hS. 

Fig. 16 shows one embodiment for HS modification that facilities enhanced RF measurement telemetry. 
Fig. 17 shows how the LC is used in a Home Base Station architecture. 
30 Fig. 1 8 illustrates a typical case where signals from three base stations can be detected. 

Fig. 19 illustrates a typical case where signals from four base stations (including remaining set information) can be 

detected. 
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figJO shows a MS detection scheme with a two base st^^ 

Pig. 21 illustrates a typical amorphous location area with on)/ the signal detection of a single base station sector, by a 

MS. 

fig. 22 shows a series of typical reverse path CDMA RF measurements in a dense urban area. 
S f ig. 23 shows a series of typical reverse path CDMA RF measurements in a rural setting, 

fig. 24 shows a typical Location Center connection to a CTIA Model. 
Fig. 25 shows a typical national Location Center and relevant network connections. 
Fig. 26 illustrates a typical three dimensional delay spread profile. 

Fig. 27 shows the magnifying effects of converting similar-property forward and reverse path three-dimensional 

10 images. 

Fig. 28 illustrates an image and relief representation of a CDMA Delay Spread Profile. 
Fig. 29 illustrates the main components of the Signal Processing Subsystem 20. 
fig. 30 illustrates an image based on an RF signal measurement sample set, before image histogram equalization 
filtering is applied. 

IS Fig. 31 illustrates an image based on an RF signal measurement sample set, after image histogram equalization input 

cropping filtering is applied. 

fig. 32 illustrates an image sample grid before image filtering. 

fig. 33 shows a CDMA profile image after input cropping is used at a level of SO percent 

fig. 34 illustrates the results of combining input cropping at 40 percent, then performing four by four median filtering 

20 on the resultant 

fig. 35 shows the results of combining input cropping at SO percent with four by four median filtering. 

fig. 36 illustrates how location estimates can be provided using voice channel connections via an ACD and Internet 

technology. 

Fig. 37 shows wireless location of a HS using the Voice Channel from a Hunt Group. 
25 fig. 38 iDustrates how location information can be provided via Text paging or short message service messaging. 

fig. 39 shows how location information of an MS can be provided via Internet via "Push" technology. 

Fig. 40 illustrates how location directions can be provided to nearest members, regarding directions for each individual 
member to reach a distressed MS caller. 

fig .41 illustrates bow traveling instructions from two different points an be provided to an initiator. 
30 Fig.42 illustrates how wireless location services an be used to facilitate automotive rental car tracking and control. 

fig. 43 indicates the addition of a fuzzy bgk module which discretizes the wireless location estimate output from the 
TOA/IDOA baton estimator mod*. 
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DETAILED DESCRIPTION 

Various digital wireless communication standards have been introduced such as code division multiple access (CDMA) 
and rune Division Multiple Access (TDHA) (e.g„ Global Systems Mobile (GSH). These standards provide numerous enhancements 
for advancing the quality and communication capacity for wireless applications. Referring to CDMA, this standard is described in 
5 the Telephone Industries Association standard IS-95, for frequencies below I GHz, and in J-STD-008, the Wideband Spread- 
Spectrum Digital Cellular System Dial-Mode Mobile Station-Base station Compatibility Standard, for frequencies in the 1.8 - 1.9 
GHz frequency bandi 

Additionally, DMA general principles have been described, for example, in Ui. Patent 5,109390, Diversity Receiver in a 
CDMA Cellular Telephone System, by Gilhousen. There are numerous advantages of such digital wireless technologies such as CDMA 
10 radio technology. For example, the CDMA spread spectrum scheme exploits radio frequency spectral efficiency and isolation by 
monitoring voice activity, managing two-way power control, provision of advanced variable-rate modems and error correcting 
signal design, and includes inherent resistance to fading, enhanced privacy, and provides for multiple "rake" digital data receivers 
and searcher receivers for correlation of multiple physical propagation paths, resembling maximum likelihood detection, as well as 
support for multiple base station communication with a mobile station, Le., soft or softer hand-off capability. When coupled with 
IS a bcatioa center as described herein, substantial improvements in radio location an be achieved, for example, the CDMA spread 
spectrum scheme exploits radio frequency spectral efficiency and isolation by monitoring voice activity, managing two-way power 
control, provision of advanced variable-rate modems and error correcting signal design, and includes inherent resistance to fading, 
enhanced privacy, and provides for multiple "rake" digital data receivers and searcher receivers for correlation of multiple physical 
propagation paths, resembling maximum libKhood detection, as well as support for multiple base station communication with a 
20 mobile station, le-, soft hand-off capability. Moreover, this same advanced radio communication infrastructure can also be used 
for enhanced radio location. As a further example, the apabifities of IS-41 and AIN already provide a broad-granularity of wireless 
location, as is necessary to, for example, properly direct a terminating call to a mobile station. Such information, originally 
intended for call processing usage, can be re-used in conjunction with the location center described herein to provide wireless 
location in the large (Le n to determine which country, state and city a particular mobile station is located) and wireless location in 
25 the small (Le., which location, plus or minus a few hundred feet within one or more base stations a given mobile station is located). 
Fig. I illustrates a wireless location network using two commercial mobile radio service provider networks for the 
present invention. Accordingly, this figure illustrates the interconnections between the components of a typical wireless network 
configuration and various components that are specific to the present invention. In particular, as one skilled in the art will 
understand, a typical wireless network includes: (a) a mobile switching center (MSC) 12a; (b) generally a service control point 4a. 
30 and base nations (not shown) which are in communication with a mobile switch center 12a. Within a typical metropolitan area it is 
also common for a second commercial mobile radio service (CMRS) provider to offer wireless service within essentially similar 
coverage areas, such systems typically including an mobBe switch center 12b, service control point 4b, and associated base stations 
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(not shown). Added to this wireless network, the present invention provides tbe following additional components: 

(I) a location system or center 42 which is required (or determining a location of a target mobile station using 
signal characteristic values as measured by the target mobile station (not shown) and nearby base stations (not shown), further 
consisting of the following modules or subsystem components: 
5 (LI) an application programming interface 14, for physically interfacing with ami controlling the messaging to and 

from each CHRS mobile switch center 12a, 12b, service control points 4a and 4b, receiving location requests from either the mobile 
switch center 12a, or 12b, or the Internet 68, and providing connection to the signal processing subsystem 20; 

(I J) a signal processing subsystem 20, which is in communication with the application programming interface 
(API) 14. The signal processor 20 receives, queues, filters and processes signal measurement messages into various formats suitable 
10 for the location estimate modules DA 10 and TOA/TDOA 8; 

(I J) a TOA/TDOA location estimate module 8, in communication with the signal processing subsystem 20. The 
TOA/TDOA module 8 provides a location estimate result, using a time of arrival or a time difference of arrival technique based on 
conditioned signals from the signal processing subsystem 20; in addition the TOA/TDOA module may also process signals from the 
distributed antenna module 10, in order to provide a location estimate within environments containing distributed antenna 
IS systems; 

(1.4) a distributed antenna (DA) module 10, which receives signals related to distributed antennas, from the signal 
processor 20 in communication a location estimating capability for utilizing one or more distributed antenna systems 168 as shown 
in Fig. 2, wherein each such system 168 provides wireless location information for an MS 140 within the area in communication 
with one or more distributed antenna system 168. 

20 (1.5) a home base station module (HBS) 6 in Fig. I, which receives signals from the controller 14 and determines 

wireless location (Lt, providing a location estimate result) based on registration principles of the wireless user's mobile station 
when in communication with the user's borne base station (not shown) in communications with a given service control point 4a or 
4b, containing ahome bast station application (not shown). 

Since home base stations ami distributed antenna systems can be looted on potentially each floor of a multi-story building, 

25 m such cases where infrastructure is installed, the wireless location technology described herein can be used to perform location in 
terms of height as well as by latitude and Longitude. 

Referring to Fig. 2, additional detail is provided of typical base station coverage areas, sectorization, and high level 
components used m the present invention's scope, including the mobile switch center 1 12, a mobile station 140 in communication 
with a home base station 160, and communication between the location system 42 and the public Internet 468, via an Internet 

30 service provider interface 471 A novel aspect of this invention includes providing wireless location estimate information to various 
designated users via the public Internet Although base stations may be placed in any configuration, a typical deployment 
configuration is approximately in a cellular honeycomb pattern, although many practical tradeoffs exist, such as site availability, 
versus the reqmnent for naxinal terrain coverage area. To illustrate, such exemplary base stations (BSs) 122a through I22g are 
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shown, cadi of which radiate referencing signals within their area of coverage to facilitate mobile nation (MS) 140 radio frequency 
connectivity, and various timing and synchronization functions. A given base station may contain no sectors (not shown) . thus 
radiating and receiving signab in a 560 degree omnidirectional coverage area pattern, or the base station may contain "smart 
antennas" (not shown) which have specialized coverage area patterns. 

5 Alternatively and generally most frequent are base stations having three sector coverage area patterns. Shown in Fig. 2, 

each sector for base station 122a through I22g contains three sectors, labeled a, b, and c which represent antennas that radiate 
and receive signab in an approximate 120 degree arc, from an overhead view. As one skilled in the art will understand, actual base 
station coverage areas generally are designed to overlap to some extent, thus ensuring seamless coverage in a geographical area. 
Control electronics within each base station are used to communicate with a given mobile station 140. Further, during 

10 communication with the mobile station the exact base station identification and sector identification information are known and 
are provided to the location center 1 42. 

The base stations located at their all sites may be coupled by various transport facifities 176 such as teased lines, 
frame reby, T-Carrier links, optical fiber links or by microwave communication links. 

When the mobile station is powered on and in the idle state, it constantly monitors the pilot signal transmissions from 

IS each of the base stations located at nearby all sites. As illustrated in fig. 3, base station/sector coverage areas may often overtop 
both in the context of a single CHRS base station network, and abo in the context of multiple CM RS base station networks, thus 
enabling mobile stations to detect, and, in the case of certain technologies, communicate simultaneously along both the forward 
and reverse paths, with multiple base stations/sectors, either with a single CHRS network or, in the case of hand-offs and roaming, 
multiple CHRS network equipment In fig. 3 the constantly radiating pilot signals from base station sectors 122a, 122b and 122c are 

20 detectable by mobile station 140 at its location. The mobile station 140 scans each pilot channel, which corresponds to a given base 
station/sector ID, and determines which cell h is m by comparing signab strengths of pilot signals transmitted from these 
particular aB-sites. 

The mobile station 140 then initiates a reparation request with the mobile switch center 1 12, via the base station 
controller 174. The mobile switch outer determines whether or not the mobile station 140 b allowed to proceed with the 
25 registration proass (exapt in the case of a 91 1 all, wherein no registration proass is required). At this point calls may be 
originated from the mobile station 140 or calb or short message servia messages can be received from the mobile switch center 
111 

As shown in Fig. 2, the moWe switch center 1 1 2 communicates as appropriate, with a class 4/5 wireline telephony circuit 
switdiorother antral offices, with telephone network (PSTN) 24. Such 

30 antral offices connect to wireline stations, snch as telephones, or any communication device compatible with the line, such as a 
personal or home base statkm. The PSTN may abo provide connections to long distance networks and other networks. 

The mobile switch center 112 may abo ndize IS/41 data circuits or trunks 522, whkh in turn connects to a service 
control point 104, using, for example, signaling system #7 (SS7) signaling fink protocob for intelligent call processing, as one 
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skffled in the art will understand. In the ca» of wiretess advanced intelligent network (AIN) services such trunks and protocol* are 
Died for all twang instructions of caOs interacting with tbe mobile switch center 112 or any switch capable of providing seme? 
switching point functions, and the public switched telephone network (PSTN) 24, with possible termination back to the wireless 
network. In the case of an mobile station 140 m communkatbn with a corresponding home or office base station (HBS) 160, the 
5 HBS 1 60 controls, processes and interfaces the mobile station 140 to the PSTN 24, in a manner similar to a cordless telephone 
system, except that added AIN logic within, for example, the service control point (SCP) 104 is used to determine H the mobile 
station 140 is being controlled by the HBS 160 or a wiretess base station 122. Regarding non-HBS calls, the mobile switch center 112 
may direct cab between mobile stations 140 via the appropriate cell site base stations 122 a through I22h since such mobile 
stations 140 do not typically communicate directly with one another in such wireless standards as CDMA, TDMA NAHPS, AMPS and 
10 GSM. 

Referring again to fig. 2, tbe Location system 42 interfaces with the mobile switch center 1 12 either via dedicated 
transport facilities 178, using for example, any number of LAN/WAN technologies, such as Ethernet, fast Ethernet, frame relay, 
virtual private networks, etc, or via tbe PSTN 24 (not shown). The location system 42 receives autonomous (e.g M unsolicited) 
autonomous or command/response messages regarding, for example: (a) the wireless network states, including for example, the 

IS fad that a base station has been taken in or out of service, (b) mobile station 140 and BS 122 radio frequency (RF) signal 

measurements, notifications from a SCP 104 indicating that an HBS 160 has detected and registered with the SCP 104 the mobile 
s&tion 140 corresponding to the HBS 160, and (c) any distributed antenna systems 168. Conversely, the location system 42 
provides data and control information to each of the above components in (a) - (c). Additionally, the Location system 42 may 
provide location information to an mobile station 140, via a BS 122, using, for example the short message service protocol, or any 

20 data communication protocol supported by the air interface baetween the base station and the mobile station. Interface 106 
connecting the location system 42 with the service control point 104 may also be required in the event the tome location register 
and/or the home base station AIN function is located in the SCP 104. 

Assuming the wireless technology CDHA is used, each BS 122a, 122b, 122c, through I22g uses a time offset of the pilot PK 
sequence to identify a forward CDMA pilot channel. Furthermore, time offsets, in CDMA chip sizes, may be re-used within a PCS 

25 system, this providing efficient use of pilot rime offset chips, thus achieving spectrum efficiency. 

Tbe use of distributed antennas is another technique for improving or extending the RF coverage of a radio coverage area 
120 of a wiretess system. Such distributed antennas are typically used in buildings or other areas of dense clutter, such as 
numerous walls, partitions and/or similar structures causing substantial signal attenuation. As shown in figs. 6, 9, 10, 1 1, and 13, 
distributed antennas 168 are typically connected together in a serial fashion for communicating with one or more infrastructure 

30 base stations 121 Distributed atennnas may be connected to the mobile switch center 1 12 via various air interlaces, as shown in 
figs. 10 and 1 1, or alternatively distributed antennas may ^ 
as shown in Fig. 9, or via a private branch exchange (PBX) as shown in Fig. 13. 

Referring to fig. II, distributed antennas I6B are useful particularly in wiretess system configurations involving 
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mkn»celb.aod potentially imioor environments, soch as wireless systems in mmmunication with private branch exchange systems 
(reference Hg. 13) in business offices, and in wireless local loop applications (not shown) as one skilled in the art will understand. 
Additionally, a districted antenna embodiment can provide significant improvements in decreasing location error, as compared 
with an indoor mobile station 140 (reference fig. 1 1) user with a wireless connection to an outdoor, infrastructure base station 122, 
S asiUimratedinfigs.ll,i2,l3andl4. 
MOBILE STATION DESCRIPTION 

As an example of a mobile station 140, such a mobile station will be described using CDMA technology, f ig. 1 5 
illustrates a typical block diagram of the functional components of a CDMA mobile station (MS) 140, based on the patent. 
Diversity ftaiwr inaCDMA Cellular Telephone System", patent number 5,109390. The MS 140 contains an antenna 510 coupled 
10 through diplexer SI2 to analog recehtrSW and transmit power amplifier SI6. Antenna SI0 and diplexer 512 permit simultaneous 
transmission and reception of signals through an antenna 510. Antenna 510 collects transmitted signals and provides them through 
diplexer 512 to analog receiver 514. Receiver 514 receives the IF frequency signals, typically either in the 800-900 MHZ or 1.8-1 .9 
GHz oaiid,fromdiplexer5l2,forampfiftai»naiidfreq«^ M«ncy (IF)- Translation is 

accomplished through the use of a frequency synthesizer of standard design which permits the receiver 514 to be tuned to any of 
1 5 the frequencies within the designated receive frequency band. The IF signal is passed through a surface acoustic wave bandpass 
filter, typically of 125 MHZ bandwidth, to match the waveform of the signal transmitted by a base station 121 Receiver 514 also 
provides an analog to digital converter (not shown) for converting the IF signal to a digital signal. The digital signal is provided to 
each of four or more data receivers (520, 522, 524. and 526), one of which is a searcher receiver (526) with the remainder being 
data receivers, as one skilled in the art will understand. 
20 Analog receiver 514 also peiformsa open-loop type of power control function for adjusting the transmit power of the 

mobile station 140 on the reverse fink channel. Receiver 514 measures the forward fink signal strength of the signals from base 
stations 122, then generates an analog power control signal to circuitry in the transmit power amplifier 5 1 6, which can effect a 
range up to about 80 dB. The power control for the transmit power amplifier 5 1 6 is also supplemented by a closed-loop power 
control or mobiteattenuatioo code (MAC) control parameter sent to the mobile station 140 via the air (u, wireless) interface from 

25 aBS |22,whheitlwtlKCMACofVrttCQ^ 

one of eight values 0 tJirot«b 7, winch effect a closed bop to raise or lower the power correction. The transmit amplifier 516 may 
utilize one of three transmit power dasses when transmitting within a transmitted power control group in the 800-900 MHZ 
cellular band: class I (I to 8 dBW), class II (-3 to 4 dBW), or class III (-7 to 0 dBW), for a closed-loop range of about " 32 dB. In 
the PCS IJ-1.9 GHz band five dasses are defined: dass I (-2 to 3 dBW). class II (-7 to 0 dBW), dass 111 (-12 to -3 dBW), class IV (- 

30 17 to -6 dBW),dan V (-22 to -9 dBW). for a dosed-toop range of about " 40 dB. The mobile station 140 power class and transmit 
power level for a cwnraunkatmg mobile station 140 is known to the wireless infrastructure network, and may be utilized for 
is desert txrebrbeicw. 
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Tbe digitized IF signal may contain the signals from several telephone alb together with the pilot channels and 
moltipath delayed signals from each of several pilot channels. Searcher receiver 526, under control of control processor 534, 
continuously scans the time domain around tbe nominal time delay offsets of pilot channels contained within the active, candidate, 
neighboring and remaining sets of pilot channels. The initial sets of pilot channels and a defined search window size for each set are 
5 provided by a control message from a BS 122 via tbe air interface to tbe mobile station 140. The searcher receiver 526 measures the 
strength of any reception of a desired waveform at times other than the nominal time and measures each pilot channel's arrival 
time relative to each pilot's PN sequence offset value. Receiver 526 also compares signal strength in the received signals. Receiver 
526 provides a signal strength signal to control processor 534 indicative of the strongea signals and relative time relationships. 
Control processor 534 provides signals to control digital data receivers 520, 522 and 524 such that each of these 

10 receivers processes a different one of the strongest signals. Note, as one skilled in tbe art will understand, the strongea signal, or 
finger, may not be tbe signal of shortea arrival time, but rather may be a reflected, and therefore delayed, signal (such reflected 
denoted collectively as n muitipatfa a ). Data receivers 520, 522 and 524 may track and process multipath signals from tbe same 
forward channel pilot channel offset or from a different forward channel pilot off seL In the case where a diflerent pilot channel 
offset signal is of greater strength than the current cell she (or more specifically the current base station 122) pilot channel offset, 

15 then control processor 534 generates a control message for transmission on a reverse channel from the mobile station 140 to the 
current BS 122, requesting a transfer of the all, or a soft hand-off, to the now strongea cell she Base station 122. Note that each of 
the four receivers 520, 522, 524 and 526 can be directed independently from each other. The three data receivers 520, 522, and 524 
are capable of tracking and demodulating multipath signals from of the forward CDMA pilot channel Thus data receivers 520, 522 
and 524 may provide reception of information via separate multipath signals from ore BS 122 (e.g., in particular, an antenna face 

20 of a sectored antenna at the BS 122, or reception of signals from a number of sectors at the same BS 122, or reception of signals 
• from multiple BSs 122 or their antenna faces of sectored antennas. Upon receiving a CDMA pilot measurement request order 
command, or whenever, (a) the mobile station 140 detects a pilot signal of sufficient strength, not associated with any of the 
assigned forward traffic channels currently assigned, or (b) the mobile station 140 is in preparation for a soft or hard hand-off, 
then the searcher receiver 526 responds by measuring and reporting the strengths of received pilots and the receiver's definition of 

25 tbe pilot arrival time of the earliest useable mtdtipath component of the pilot, in unhs of PN chips (one chip = 0.8UB02 

microseconds). The receiver 526 computes the strength of a pilot by adding the ratios of received pilot energy per chip to total 
received spectral density, ^ of at most k useable multipath components, where k is the number of data receivers supported in the 
mobile station 140. 

The outputs of data receivers 520, 522, and 526 are provided to diversity combiner and decoder circuitry 538 (Le., 
30 simply diversity combiner). The diversity combiner 53B performs tbe function of adjuaing the timing of a plurality of areams of 
received signals into alignment and adds them together. In performing this function, tbe diversity combiner 53B may utilize a 
maximal ratio diversity combiner technique. Tbe resulting combined signal stream is then decoded using a forward stream error 
detection contained within tbe diversity combiner. The decoded result is then passed on to tbe user digital baseband circuitry 542. 
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The oar digital baseband circaitry 542 typically includes a digital vocoder which decodes the signals from diversity 
combiner 538, and then outputs the results to a digital to analog (D/A) converter (not shown). The output of the D/A serves as an 
interface with telephony circuitry for providing mobile station 140 user analog output information signals to the user 
corresponding to the information provided from diversity combiner S38. 

5 User analog voice signab typically provided through an mobile station 140 are provided as an input to baseband 

circuitry 542. Baseband 542 serves as an interface with a handset or any other type of peripheral device, to the user for audio 
communication. Baseband circuitry 542 includes an analog to digital (A/D) converter which converts user information signals from 
analog form into a digital form. This digital form is then input to a vocoder (not shown) for encoding, which includes a forward 
error correction function. The resulting encoded signab are then output to transmit modulator 546. 

10 Transmit modulator 546 modulates the encoded signal on a PN carrier signal whose PN sequence is based on the 

assigned address function for a wireless calL The PN sequence is determined by the control processor S34 from call setup 
information that was previously transmitted by a cell site BS 122 and decoded by the receivers 520, 522, 524 as one skilled in the 
art will understand. The output of transmit modulator 546 is provided to transmit power control circuitry 550. Note that signal 
transmission power is controlled partially by an open-loop analog power control signal provided from receiver 514. In addition, 

15 control bits are abo transmitted by the controlling BS 122 in the form of a supplemental dosed-toop power adjustment command 
and are processed by data receivers 520, 522,. In response to this command, control processor 534 generates a digital power 
control signal that b provided to the transmit power amplifier 516. Transmit power control 550 also provides the digitized and 
encoded user information signab in an IF format to output to the transmit power amplifier 516. The transmit power amplifier 516 
converts the IF format signab into an Rf frequency by mixing this signal with a frequency synthesizer (not shown) output signal for 

20 providing a corresponding signal at the proper output transmission frequency signal. Subsequently, transmit power amplifier 5 1 6 
amplifies the signal to the final power output level. The transmission signal is then output from the transmit power amplifier 516 to 
the drplexer 511 The diptater 5 12 then couples the transmission signal to antenna 5 1 0 for air interface transmission to the 
infrastructure base stations 121 

Additionally, note that control processor 534 is also responsive to various control and information request messages 

25 from the controlling BS 122, including for example, sync channel messages, the system parameters messages, in-traffic system 
parameters messages, paging/alert messages, registration messages, status requests, power control parameters messages and hand- 
off direction messages, as one skilled in the art will understand. 

Referring stffl to a CDMA mobile station 140, in one embodiment of the present invention, the above-described standard 
CDMA mobile station architecture in an mobile station 140 is sufficient However, in a second embodiment, this architecture may 

30 be modified in minor, cost effective ways so that additional information may be transmitted from an mobile station 1 40 to the BS 
121 The modifications for this second embodiment will now be described. The following modifications, either together or in any 
combination, provide improvements in location accuracy from the perspective of capturing RF measurement data: ( I) increasing 
measurement quantity, ( 2) improving measurement transmission, ( 3) extending the pilot set and search, ( 4) extending the pilot 
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signal reporting capabilities, 5) decreasing the Quantization size of the units osed to report the pilot PN phase arrival time, 6) 
improving the accuracy of the mobile and base station time reference, and 7) increasing the number of data receivers and related 
Circuitry, for correlation tracking of a larger plurality of pilot channels and each of their multipath signals. 

Using the standard system parameters overhead message in the paging channel as one method of reporting to the base 
S station the signal strengths and delays of detectable pilot channels, a mobile station has various timers indicating the upper bounds 
of time needed to respond to a request, and to bid for access to the forward channel (if not already using it's assigned traffic 
channel). These timers restrict the frequency of measurement reporting and thus limit the aggregate amount of measurement data 
which can be sent in a given time period. 

For example, CDMA standard tkner establishes the maximum time of a mobile station to enter the update overhead 
10 information substate of the system access state to respond to messages received while in the mobile station idle state, typically 03 
seconds. Timer T^ the maximum time for the mobile station to respond to one service option request, is typically 02 seconds. 
Thus during a period of about five seconds, this measurement reporting method would provide for a maximum of about fifteen 
measurements. 

However the same CDMA receiver design infrastructure, with slight circuitry modification can be used to support 
I S improved measurement transmission. 

In order to collect a data ensemble of RF measurements that represents a statistically significant representation of data 
values in a geographical area of interest, it is the intention that the second (CDMA) mobile station 140 embodiment be capable of 
sending to the network base station infrastructure approximately 128 samples of each muhipatb peak signal strength and its 
relative delay, for each detectable pilot channel, in less than a preferred period of about five seconds. In order to transmit this 
20 amount of data, other means are reeded to efficiently send the needed data to the network (i.e., from the mobile station to the 
base station, and then to forward data to the wireless switch, and then to forward data to the Location Center).- 

The CDMA air interface standard provides several means for transmitting data at higher rates. The Data Burst message 
can be used, or various bbnk-and-burst, dim-and-burst multiplex options can be used, and well as selecting various service options 
2 through 9, through the setup of a normal voice or data telephone calL In one embodiment, , the user dials a speed number 
25 representing a data-type call to the Location Center 142, which initiates a command to the mobile station 140, responsive by the 
mobile station 140, which then provides the location center 142, via the base station 122, mobile switch center 1 1 2 with the needed 
measurement data. 

Referring to Fig. 16, in one embodiment a software controllable data connection or path 49 is estabhshed between the 
control processor 46, and the user digital baseband 30 functional components in the mobile station, a much larger quantity of RF 
30 measurements, on the order of 128 data samples, can be transmitted as a data burst, multiplexed, or sent by other means such as a 
data circuit aO, back to the network, and to the Location Center. Note that the existing connection between the control processor 
534 and the transmit modsteor 546 may aho be used, as weD via any other virtual path, such as software register-to-register 
move instructions, as bng as sufficient signal measorenem camera and daia sax 
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location center 142 via the associated interfaces. Those skilled in the art will understand the wireless network consists of the base 
station, mobile switch center, and reJated infrastructure equipment, interfaces and fadTities circuits to telemeter the measurement 
content and data samples to the location center 141 Additional design issues include, for example, the fact that existing memory in 
the mobile station must be allocated to the temporary storage of RF sample measurements, and new control means, such as 

5 selecting a future use control bit pattern in the CDHA air standard, are required to telemeter, preferably upon command, RF 
measurement sample fata to the Location Center 142 in Fig. I. In the case where a location request is received by the location 
engine 139 in the location center 142, the location engine 139 initiates a message to the mobile station 140 via a signal processing 
subsystem and the location center mobile switch center physical interface, the location appGcations programming interface 136 for 
the mobile switch center 1 12 and the wireless network infrastructure. 

1 0 The addition of a controllable data connection or path 49 can be easily performed by CDHA application-specific 

integrated circuit (ASIC) manufacturers. In the case of one ASIC manufacturer known to the authors, the Qualcomm ASIC chip 
mobile station modem, model number HSN 2300, provides both the control processor function 534 and the user digital baseband 
542 functions or the same chip, thus the external pinout physical configuration would not have to change to accommodate the 
wireless location software amtroBabte data connection or path 49 modification. 

15 If the mobile station 140 searcher receiver detects 4 pilots with 4 muhipaths each, with each measurement consisting of 

a pilot index, finger identification, muhipath signal strength, and multipath arrival time, then about 480 bytes are needed per 
measurement Assuming the searcher receiver performs one measurement every 10 mS, about I second is needed to compile and 
buffer each sample of 128 measurements per sample, or about 48 kilobytes. Using a typical 9600 kbps CDHA data channel between 
the mobile station 140 and a BS 122, and assuming a 50 percent overhead, the mobile station can complete the collection and 

20 transmission of a location measurement sample in less than ten seconds, which is within a reasonable period for satisfying a 
location request 

The implementation of the data services required to telemeter the necessary signal measurements may be performed in 
any of several embodiments. In one embodiment the location signal measurements request-response application message set 
utilizes the air interface services provided by the spare bits and digital control words not currently in the air interface standards IS- 

25 95 and ANSI-j-STD-008. Such btts and control words can be reserved for the purpose of requesting and providing the required 
location signal measurements discussed herein. Using this embodiment the base station and mobile switch center must be modified 
to support the interworldng function required between the location center and the mobile station. In a second embodiment the 
location signal measurements request-response application message set is implemented using service options 4 and 12. which 
provides asynchronous data transmission capability, as defined in IMS Data Standard, Asp* and fax Section document number 

30 TtA/EIA/IS-DATA.4. Using this second embodiment, the mobile station control processor provides, or would interface with a 
function emutatmg mobile termination 0 or 2 services at the 1^ network reference point The L-API then provides, or would 
interface with a function emuiatitg the physical interface connecting a data circuit-terminating equipment (DCE) to die PSTN at 
the W network reference point, in communication with the PSTN, whkb is also in communication with reference point Ai, which is 
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in communication with reference point whkb is in torn in communication with reference point R^. An advantage of this 

embodiment is that no ASIC or drairt board modifications are needed in the mobile station. 

The ANSI standards J-0D8 and IS-95 provide several means for the base station 122 to establish and to extend the 

search window size that the mobile station 140 should use in hs scanning process, and to identify further pilots, for location 
S purposes, either existing standard parameters can be extended, or a location message request from the Base station can inform the 

searcher receiver of the mobile station to extend its search range, as necessary, to capture all relevant base station pilots and their 

rauMpath fingers, in order to complete the location measurement sample. 

Tlx search performance criteria defined in ANSI IS-98, Recommended Minimum Performance Standards for Dial Node, 

can be increased as appropriate to accommodate a larger set of potentially detectable base stations, including Location Base 
10 stations and Mobile Base stations. Additionally the search window table size for various search window values must be increased to 

accommodate new pilot channel pn-offsets associated with Location Base Stations and Mobile Base stations. 

Existing standard parameters indude, for example using the In-traffic System Parameters Message, the values 

SHCH WIH A (for active and candidate set), SROMWIN H (for neighboring set), and SRCH SIM R (for remaining set) on be 

used to cause the searcher receiver to increase its search area to detect and thus measure as many pilots as an be detected in the 
1 5 area. Extending the range of T ADD and TDHOP parameters can also be used to facilitate the mobile to retain data on additional 

pilots in the area. The extended neighbor Est message b used to inform the mobile station of the necessary characteristics of 

neighboring pilot signals. For example if location base stations are used on a different frequency assignment, and/or utilize unique, 

non-public pilot PN sequence offset indices, for example, in using increments other than 64 PN chips, then the mended neighbor 

fat message can be used to instruct the mobile station to scan for those types of base stations, accordingly. 
20 There can be several combinations of delay spread signal strength measurements made available to the location center, 

from the mobile station 140. In some cases the mobile station 140 may detect up to three to four pilot channels (representing J-4 

base stations), or as few as one signal from one pilot channel 

For each plot channel detection case, multiple, up to three to four fingers, or muhipath signals may be detected per 

pilot channel 

25 Mote that multiple muhipath signals, or multiple fingers'* could exist from a less-strong BS pilot signal, or in any of 

several combinations, which can depend widely upon the mobile station's location within the base station environment 

By modifying the CDMA Base station, mobile nation and controller capabilities to provide the location center 142 with 
data that exceeds the 1:1 fingers to data receiver correspondence, additional information can be collected and processed in order to 
further improve the accuracy of the location estimate. A control message from the location center 142 and carried through the 
30 network, is sent to the control processor in the mobile station, requiring the searcher receiver in the mobile station o transmit to 
the location center 142 via the network, al detectable delay spread fingers related to each detectable pilot channel. 

In one embodiment the control message is implemented in the CDMA receiver via a multiplexing techniq ue, including 
appropriate namputatioi of the band-off parameters TADDs, T DROPs, search window and the active, neighbor and remaining 
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pilot sets heU within the mobile station' memory. 

Although the CDMA ANSI J-STD 008 requires reporting of the pilot channel arrival time in a time period of units of one 
chip size, or 8I3J02 Baaoseconds, typical CDMA receivers contain an internal Quantization interval of one eighth chip size. 

Within the mobile station, by modifying the tone of arrival message response message to output the delay value in unit 

S increments of one-eighth chip size, the precision of location accuracy can be increased from about 800 feet in radius to about 1 1 0 
feet At the base station the arrival time measurement is forwarded in one-eighth units to the Location Center. A multiplier function 
applied to the received measurement at the base station rescaies the measurement for routine CD HA control and monitoring 
purposes, in order to be consistent with the CDMA standard. In order to distinguish among several mobile station models which 
report arrival time in either one-eighth chip units or one chip unit sizes, an encoding can be used in the mobile station's hardware 

10 or software identifications, telemetered to the base station and Location Center, in order to determine the arrival time 

measurement units. In one embodiment the analog receiver in the mobile station utilizes a clock signal which runs eight times 
fatter than the dock originally disclosed in the Gtthossen patent, number 5,1 09390. In this manner the digital signal provided to 
the data receivers and the searcher receiver will include an improved resolution in ability to detect delay spread signals, which are 
directly used to improve wireless location. 

IS Although the CDMA air interface standard only requires a 1,000 nanosecond tolerance accuracy within respect to the 

base station, location accuracy can be improved if manufacturing calibration precision's are held to within tighter tolerances, such 
as less than 250 nanosecookHowew in any given location request, as long as the base station to base station tolerances are 
timed properly to an amount less than 500 nanoseconds, then very good location estimates can be performed due to the self 
canceling time effect geometries typically present in multi plot channel detection found in urban and suburban areas. 

20 Increasing the typical number of data receivers in either the mobile station or base station provide added capabilities to 

bck ami track more delay spread fingers and respective base station pilot channels. The resulting additional information, if 
available in a given radio coverage area 120 in Fig. I, can be used for enhanced location estimate accuracy due to confluence or 
voting methods whkh can be deployed at the Location system 142. 

Id certain cases wireless location signals are received representing distributed antennas (or other base stations) across 
25 building floor boundaries being received from a specific floor on a multi-storied building. As a specific example, consider signals are 
being received from both the 40th and the 41th floor, the objective is to resolve the ambiguity of the situation. Fuzzy logic 5 used 
to resolve this ambiguity. The (termination as to which floor the user of the mobile station is on is based on the strength of the 
signal, $, and the past reliability of the information associated with the two antennae, H The spaces of $ and ft are discretized using 
fuzzy sets. The strength is defined as being: (I) VERT STRONG (VS), (2) STRONG (S) t (3) WEAK (W), and (4) VERY WEAK (VW) as 
30 defined by membership funaioi* The refiaKStyof infonrntran h (VR),(2) RELIABLE (R), 

and (3) HOT RELIABLE (NR), again as defined by membership functions. A fuzzy relation or mapping is described which descretizes 
how confident it is that the signal is coming for a given fbor,e.g,the 40th floor, using the following notation: 
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The above relation matriz is read, for example, that when the signal information is RELIABLE and the strength is WEAK, 
then the confidence that the signal is coming from the 40th floor is OA A similar fuzzy relation matrix is established for the 
distributed antenna on the 41st floor, and thus the result would be a confidence factor associated with the mobile station being 

S located on either floor. A single solution, that is, whether the mobile station is on the 40th or 4 1 st floor is determined using a 
compositional rule of inference. The compositional rale of inference is a function that prescribes a mechanism for consolidating 
mambenhip function values into a single crisp function. This function can take a variety of forms including max-min composition, 
max-product composition, etc. The compositional rule of inference can be implemented, for example, by a summing junction which 
collects the results of each firing rule. The summing junction's output is then provided to a centroidal defuzzier which provides the 

10 discretized output 

Fig. 43 indicates the addition of a fuzzy logic module 41 which optionally discretizes the wireless location estimate 
output from the TOA/TDQA bcaton estimator module B. In the above case fuzzy logic rules related to the distributed antenna 
rehtion matrix would be fired or activated as a result of exmining the message header data structure that indicates that the 
location estimate was the result of a distributed antenna case around the 40tb and 41st floor of a particular building within which 
IS such fuzzy relations exist or in any other locafized case sherin such fuzzy relations have been predetermined. Otherwise, in cases 
where no such fuzzy rules apply, the location estimate is passed to the recipient without further discretization. 

Mote that the confidence associated with the location of the mobile station can be considered a function of several 
variables, not just the two (S and R) described above. For instance, it would not be unreasonable to segregate the reliability 
information by time signal delay as determined within this invention. The fuzzy relation is capable of handling a variety of such 
20 situations. Thus which floor the mobile station is on can be considered to be a function oi numerous variables; the ultimate decision 
can be made based on a great deal of information. 

LOCATION CENTER - NETWORK ELEMENTS API DESCRIPTION 

A location application programming interface 14 (Fig. I ), or L-API, is required between the location system's 42 signal 
processor 20 and the mobile switch center 12 network eten*m type, in ortero^ 
25 messages for wireless location pwposts. The L-API is implemented using a preferably high-capacity physical layer communications 
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interface, such as IEEE standard 6023 (10 baseT Ethernet), although other physical layer interfaces could be used, such as fiber 
optic ATM, frame relay, etc Two forms of API implementation are possible. In the first case the signals control and data messages 
are realized using the mobile switch center 1 12 vendor's native operations messages inherent in the product offering, without any 
special modifications. In the second case the L-API includes a full suite of commands and messaging content specifically optimized 
S for wireless location purposes, which may require some, although minor development oo the part of the mobile switch center 
vendor. A minimum set of L-API message types include: 

A first message type, an autonomous notification message from the mobile switch center 1 12 to the location system 42, 
is required in the event a wireless enhanced 9-1-1 call has been sent to the mobile switch center from an mobile station MO, 
including the mobile identification number (HIN), along with various CHRS identification and mobile station detected active. 
10 candidate, neighbor and remaining pilot set information, pilot strength measurements message; 

A second message type, forward path request-response message, from location system 42 to mobile switch center 1 12, is 
required to request a mobile station (KS) for signal measurements and hand-off information, with a response message back from 
the mobile switch cotter 1 12 to the location system 42, along with various CHRS identification; 

A third message type, Reverse path request-response message, from location system 42 to mobile switch center 1 12, to a 
I S BS for signal measurements received at the BS and hand-off information, for a given mobile station MIN, along with various CHRS 
identification. It is preferable for the received signal strength measurements performed at the mobile station along the forward 
path, and at the base station along the reverse path, to be reported in a variable-length data structure as follows: for each pibt 
channel offset, include the phase of the earliest arriving usable muhipatb component pilot PN sequence relative to the zero offset 
pilot PN sequence of this pilot, termed pibt PN phase or pibt arrival, in units of one-eighth PN chip, instead of units of one PN chip 
20 as stated in the standards, furthermore, in accordance with the standards, the pibt strength shall be included, measured based on 
at most k usable components, where k is the number of demodulating elements supported by the receiver system. In addition the 
total number of each detectable muhipatb components shall be reported. In addition each multipart component, for a given pibt 
shall be identified by both its delay component and signal strength, for inclusion in the signal measurements to the location system 

41 Regarding each individual onkipath component, signal strength is expressed as is commonly known, by adding the ratios of 

25 received pibt-muhhpath component energy per chip, E^ to total received spectral density (noise and signals), ^ of at most that one 
mutipatb component (Le., k is equal to one). 

A fourth message type, an autonomous notification message from the mobile switch center 1 12 to the location system 

42 is required, in the event of an mobile station band-off state change, abng with various CHRS identification. 

In order to implement additional location functions such as wide area location, wherein location is determined across 
30 roaming boundaries, outtf-coverage area conditions or mobile station 140 turned off, and home base station applications, the L- 
API must include access to and recerre (tea from a data store contained in the home location register (HLR) network element type 
associated with the mobile switch center I II 

A fifth message type is required which provides the location system 42 with the mobile station KIN, band-off, abng 
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with various CMRS identification information (e^., ok) and new state changes, old and new BS identifications, and hand-offs to 
another CMRS), roaming location and status changes. A typical communications protocol such as Signaling System number 7, 
running on a ¥35 communications channel could be osed for implementation, but numerous other protocols (e.g., TCIP/IP, ROSE. 
□USE, etc) could be used to implement this capability. If the home location register is local to the mobile switch center 1 12 then 
S the LC - mobile switch center communications link could be used, otherwise a separate communications link is used between the 
location system 42 and the home location register. 

A sixth message type, an autonomous notification message type issued from the location system 42 to the home 
location register, is required for those location applications they rely on an alert from the home location register when ever a 
particular mobile station state change occurs, along with various CHRS identification. Consider the case wherein an mobile station 
10 140 whose location is to be tracked constantly. In such cases a history of locations is maintained in the location system 42. Should 
the mobile station 140 user turn off the power, or exit from the coverage area, then by using previous location values a vector and 
approximate velocity can be determined. This sixth message type provides a notification message from the home location register to 
the location system 42 whenever a previously identified mobile station H1N has a state change. Examples of a state changes include 
cases where the base station 122 discovers the mobile station 140 has traveled to another base station, or that the current primary 
I S base station 122 can no bnger communicate with the mobile station 140 (Le^ no power), or that a new registration has occurred. 
In general this message type should support the notification from the borne location register to the location system 42 of all 
messaging and data associated with the nine types of registration, in the case of CDMA. Specif ically these include power-up, power- 
down, timer-based, distance-based, zone-based, parameter-change, ordered, hnpftcit and traffic channel registration. The location 
system 42 should also be informed of the registration enablement status of each type of registration, which an be provided to the 
20 location system 42 via a redirection of the systems parameters message. It should also be possible for the location system 42 to 
initiate an ordered registration through an order message, from the location system 42 to the mobile switch center 1 12. The mobile 
switch center 1 12 then shall route the message to the appropriate base station, and then to the mobile station The location system 
42 shook) abo be able to receive the results of the message. 

Ib order to implement additional location functions such as providing users with location information and routing 
25 instructions to certain locations via the wireless short message text paging service, an L-API is required between the location system 
42 and the network element type used to implement the short message service. Such network elements may be termed an intelligent 
peripheral or a service node. A number of existing paging interfaces have been proposed in standards bodies, and one or more 
modifications can be made to accommodate L-API content In any case, the following l-API addition is required: a seventh message 
type which allows the location system 42 to send a text message containing location information or instructions to a particular 
30 mobile station HIN, and a related message to verify response. Optionally another, ninth message type, an autonomous message 
may be provided to alert the location system 42 under conditions wherein a state change occurs on a previously pending text 
message. This last message type provides improved quafrty feedback to the initiating party regarding the acceptance situation of 
the attempted-to-send page. 
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UTILIZING MULTIPLE QMS INFRASTRUCTURE IN A SHARED COVERAGE AREA 

As a consequence in practical deployment situations that base stations are not placed in a uniform manner in a 
geographical area, and tbt tact that variable and fixed dutter introduce a variety of signal measurements which can result in the 

5 provision of an ambiguous location estimation, a novel aspect of this patent includes the utilization of the inherent ability of the 
wireless protocol aid receiver design to request and receive signal measurements along the forward and reverse air interface 
communications path with a given mobile station and other commercial mobile radio service providers, in cases where multiple 
service providers share a common coverage area. Thus in a coverage area shared by two service providers A and B, utilization of 
received signal measurements from both service provider A and service provider B can be used by the location center as unique, 

1 0 orthogonal information to both resolve ambiguous location estimates and to further improve the location estimate accuracy. 

The CDMA air interface, for example, provides a soft hand-off capability for the mobile station to hand-off a voice 
communication channel to another base station, and even to another CURS provider, termed a hard hand-off. 

Referring to Fig. 3, assume three sectored base stations 122a, 122b, and 122c, in communication with mobile switch 
cemer-A 1 12a, are owned ami operated by CHRS provider A. Further, assume three sectored base stations 1 22d and I22e, in 

15 communication with mobile switch center-B 1 12b, are owned and operated by CHRS provider B, and that the coverage area with 
CMRS-A and CHRS-B substantially overlap. In order to locate a mobile station 140 whose subscriber normally does business with 
CHRS provider A, assume that the receiver of mobile station 140 an detect signals from base stations 122a, 122b, and 122c, as well 
as from base stations I22d and I22e, although normal mode use would preclude such measurements from being initiated. Assume 
further that the resulting location estimate 131, generated from the location center 120 contains either an ambiguous location 

20 estimate value pair, or otherwise cannot render a location estimate with the desired range of accuracy. 

From an inspection of the overall base station geometry of base stations owned by CHRS A and CHRS B it is evident that 
a strong possibility exists that either I.) the receivers in mobile station 140 have the possibility to detect the pilot channels 
associated with baa stations I22d and I22e; 1) the receivers in base stations I22d and I22e have the possibility to detect the 
transmitter signal from mobile station 140. The location system 142 contains a data store of both CHRS provider's base station 

25 geometeries and is in communication with each mobile switch center - A 1 12a and mobile switch center - B 1 12b. An application in 
the location system 142 sends a control message to the mobile station 140, instructing the motile station to tune its searcher 
receiver to listen for and report bad signal measurement data regarding the pilot channel information associated with base 
stations I22d and I22e, in addition to a request to report of pilot signals relative to base stations 122a, 122b, and 122c. Similarly 
the application m the location system 142 sends messages to each of base stations I22d and I22e, with instructions to take signal 

30 measurements and report back the resulting information regarding the mobile stations transmitter 1 40. Since the signaling 

information from base stations I22d and I22e are based on a substantially different location geometty, the resultant information is 
orthogonal and thus can be used by the location center to provide enhanced location estimates. 
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if appropriate, a variation of the above process tndttdes a location center initiated forced hard land-off of the mobile 
station from a primary base station, e^- 122b associated with CHRS-A, to a raw primary base station associated with CMRS-B, e.g., 
1221 A forced band-off will further provide improvements in reducing systemic timing errors which may be inherent among base 
stations owned by different CHRS. After the appropriate signal measurements have been reported the location system 142 can 

S revert the hand-off back to the original CHRS. Other location system components shown in Fig. 3 include a controller 14 location 
applications programming interface 136 (L-API-HSQ for communications interface with multiple CHRS mobile switching centers, 
via physical interfaces 176a and 176b. 

In order to provide the most economically efficient and accurate wireless location service capabilities among multiple 
CHRS providers in a shared coverage area, a common location applications programming interface (L-API) is highly desirable. A 

10 common interlace also supports the natural competitive behaviors among wireless consumers and CHRS by providing flexible 

relationships among consumers who nay want to switch service providers, yet retain consistent wireless location services for public 
safety. This approach minimizes the L-API design and deployment costs among infrastructure vendors and location service 
providers in a shared overage area. Based on a L-API between a wireless location center and the mobile switch centers oi multiple 
CHRS, a novel aspect of this invention further includes a method and process that provides account management clearing house and 

I 5 revenue settlement capability with appropriate security management controls. This capability is implemented as wireless location 
control, accounting and security mediation agent functions to compensate CHRS providers for providing various location-specific 
network services as described herein. 

As wireless location requests are sent to the location center for a given CMRS, operated by a wireless location service 
provider (WISP), this agent I.) assesses the appropriateness of soliciting additional signal and control measurements from another 

20 CHRS* base station m the same coverage area, in order to improve the quality of the location estimate, 2.) Accesses, requests and 
receives signal and control information with another CHRS base station infrastructure, 3.) provides as appropriate a record of 
compensation entitlement between or among multiple CRMS and WLSPs, and 4.) security management controls that protect the 
privacy needs of wireless customers and the unauthorized sharing of information between or among CHRS. Security controls also 
include audit trails and controls regarding customer access of their location subscriber profile and the administration of network 

25 security processes and related base station parameters and inventory. 

Referring to Fig. 5, Location Center-base station access, multiple CHRS, an alternative embodiment is provided to 
extract the wireless location signal measurement data from each base station associated with each of multiple CHRS. Given base 
station I22i and I22j are operated by CHRS-A and base station 122k and 122m are operated by CMRS-B, a communication circuit 
provides connectivity with the location application programming interface - base station (L-API-BS) 109. The L-API-BS 109 is in 

30 communication with controller 14 in the location center 141 The communications circuit an be any of several conventional 
transport facilities, such as a private foe circuit, a DS-I or T- 1 carrier circuit, frame relay circuit, microwave circuit, or other data 
communkaoonsorccit 

The advantage of this embodiment is that no modifications are required by the infrastructure vendor in terms of the 
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embedded operation* dram, and related functions and systems which otherwise would be needed to telemeter wireless location 
signal measurement data from the base station to the location center 141 The termination equipment (not shown) in 
communication with the transport facilities, within each base station typically includes a small computer with an in-tircuit 
connection, such as an ASIC dip-on device, with connections to the control processor circuitry with the base station in the receiver 
5 section. The snail computer provides a conversion of the signals provided on the in-circuit connection to the ASIC chip, for 
serialization and transmission to the location center via the transport facilities. 


HOME BASE STATION DESCRIPTION 

The Home Base station (HBS) concept in the PCS wireless network environment allows a user's mobile station to be also 
10 used as a low cost cordless phone, whenever die mobile station is physically near (generally within 700-1,000 feei) of a Home Base 
station Devke (HBSD). This enables die nserto avoid the typically higher cost air rime charges associated with traditional wireless 
service. 

The HBSD b similar to ordinary cordless phone transceiver devices in current use today, but is modified to function with 
a PCS wireless mobile station. Although the HBSD has been typically used at a residential consumer's home, the HBSD could also be 
IS used in business settings and other environments. 

When a mobile station (US) b near the HBSD as shown in Fig. 17, and the HBSD detects the presence of a mobile 
station over the Cordless phone air interface, the HBSD signals the Home Location Register (HLR) software in the Service Control 
Point in the AIN network associated with the mobile station and mobile station's home mobile switch center. The home location 
register redirects mobile station terminating alb from the network away form the mobile station 1 mobile identification number in 
20 the mobile switch center, and to the AIHASP wireline dass V switch which connects the wireline number associated with the HBSD. 
Similarly, the HBSD, upon detecting a mobile station all origination attempt, redirects the mobile station signal from a PCS 
network fixed base station, to the control of the HBSD. The HBSD redirects the mobile station originating call through the wireline 
network, similar to any other wireline network call. 

A reverse scenario occurs whenever the mobile station and HBSD lose communication: the mobile station registers in a 
25 wireless PCS network Toed base station, causing redirection of calls to the wireless network. The cordless phone air interface may 
be of a vendor proprietary design, or it may be a similar design as the CDMA air interface. 

In order to perform a location estimate in the HBS concept, a connection is used between the Location Center (LQ and 
the home location regbter/HBS application in the SCP. Id addition, a new process, termed a Location Notification Process (LHP) 
within the home location register/SCP b used to send a message to the LC, autonomously whenever a state change occurs in the 
30 mobile station' (either via a specific fist of mobfe identification numbers or all mobile identification numbers) registration: 
registering either to a Toted Base station in the Wireless PCS network or to a HBSD. 

Alternatively the process may respond to an ointeniand message from the LCro the LNPwhhin the hon^ location 
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register/HBS application, to either case a response message from the WP to the LC provides the information regarding whether or 
not a mobile station b within range of its, or a designated HBSD. In either case the response message contains a message header 
information which provides the signal processing subsystem 20 (eqotvaleotly this may be known by signal filtering subsystem) 
with the ability to determine and distribute the information to the HBS First Order Location Estimate Model. 

5 

LOCATION USING DISTRIBUTED ANTENNAS DESCRIPTION 

CDMA distributed antennas are useful particularly in system configurations involving mtcrocelk, and potentially indoor 
environments, such as CDMA PBX (private branch exchange) systems in business offices, and in wireless local bop applications, 
from a mobile station location perspective, the distributed antenna configuration can provide significant improvements in location 
1 0 error, as compared with an indoor mobile station user with a wireless connection to an outdoor, macrocell Base station. Wireless 
location can be achieved provided attain methods and procedures (M&Ps) are followed during the installation process. Data 
related to these tt&Ps is then used by various location processes discussed elsewhere in this invention. 

First, a general description of CDMA distributed antennas is presented, followed by the HSPs necessary to support 
wireless location. 

IS In the CDMA distributed antenna concept, a set of simple antennas, placed apart in a given area, similarly to any other 

cell placement arrangement for coverage objectives, are fed by a common radio signal. Antennas are usually placed such that their 
coverage patterns are substantially or completely overlapped in area of coverage, from a wireless location perspective, completely 
overlapping coverage is preferred (this approach also improves perceived signal quality by the end users). 

The importance of understanding and characterizing the aggregate system delay elements is shown in fig. 6: Distributed 

20 Antenna Delay Characterization. For any given Pilot Channel offset T, additional delay is introduced by the microwave 

propagation channel (Point A) and any internal repeater^mphfrer equipment (Point B). Each of four delay elements t, throogb x A 
introduce further delay. A mobile station detecting all four DA antennas' delayed signals would determine various sets of 
cumulative system propagation delays. Since each delay is essentially fixed in a location, such information can be used to determine 
the mobile station location within the building. Fig. 7 illustrates the effective system timing among the delay elements 324, relative 

25 to the GPA system time 336,atong each point in the dagramshowninf^t 

fig. 9: One Exemplary DA Configuration, illustrates a typical configuration where the CDMA base station antenna is also 
directed connected to three delay elements and amerma radiators. 

The CDMA Base station transmitter common output signal is fed through a distribution coaxial able system, optical 
fibers or other means, to a string of two or more antennas. Each antenna is connected to the distribution able via a transmission 

30 One tap or delay element, which may or may not provide further broadband gain. The transmission system normally consists of two 
media channels, one for transmit and one for receive signals. Fig. 10 illustrates an Alternative DA Configuration, using multi-point 
microwave antennas connected to individual delay dements and their respective radiating antennas. 
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Pig. 1 1: Serving Dense HuW-level buildings via Virtual Pilots, illustrates a typical application where a multi-level 
building is served by two base stations with pilot offsets T and "j". Pilot offset T serves floor X and pilot offset T serves floor 
Y. As shown, a microwave fink, either active or passive, relays the base station signals between the distributed antennas within the 
building to the base stations. 

S The main concept is to introduce purposeful delay and multipath signals with sufficient delay spread for signal 

discrimination. Each antenna radiates a signal which b substantially delayed with respect to any other antenna in the area. If two 
or more paths are available for the mobile station receivers with greater than one eighth microsecond differential path delay (or 
whatever resolution is avaBable in the CDMA mobile station receivers), then two or more PN receivers in the same mobile station 
on be employed to separately receive and combine these signals and thus achieve processing gains through path diversity. 

1 0 Antennas nay be omni-dircctional or directional. 

Delay elements may be simple delay lines such as lengths of coaxial cabling, or other active or passive delay elements, 
such that the combination of components provides the needed deby. The transmission fine between the CDMA Base sation/PBX and 
the distributed antennas may be via a pair of dedicated, beam-focused high gam antennas, and/or a repeater system. Provided 
sufficient delay exists between the multipath signals from separate distributed antennas exists, each Data Receiver within the 

IS mobile station trades the timing of the received signal it is receiving. This is accomplished by the technique of correlating the 
received signal by a slightly earlier reference PH and correlating the received signal with a slightly late local reference PH. further 
distributed antenna details can be seen from GBhousen, et al, patent number 5,280,472, assigned to Quakomm, Inc. 

The total measured delay of both forward and reverse link signals between the BS and the mobile station are thus 
determined naturally by the CDMA radio receiver designs as a part of the multipath tracking process, and can be made available to 

20 a location entity for performing location estimates of the mobile station. 

However, the measurements of delay between a particular distributed antenna and the mobile station will include the 
aggregate delay components of several mechanisms, beyond the BS pilot PN offset delay. In the case of distributed antenna 
configurations, the simple TQA or TDOA model which is based solely of the speed of Tight, must now be adjusted to account for the 
purposefully introduced deby. 

25 The mobile station measures the arrival time T, for each pilot /reported to the BS. The pilot arrival time is the time of 

occurrence, as measured at the mobile station antenna connection, of the earliest arriving usable multipath of the pilot The arrival 
time is measured relative to the mobile station' rime reference in units of PN chips. The mobile station computes the reported pibt 
PH phase fi as: 

f j = (T i + 64xPILOT_PH)mod2 ls , 
30 where PILOT PN is the PH sequence offset of the pilot 

Reference Fig. 6, wind) illustrates a typkaJ distributed antenna configuration consisting of a repeater/amplifier and 
four distributed antennas. The total system (May, T ; is: 

Ti-T^ + To + T^ + Tj + Tj + T, 
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During the installation phase of the high gain antenna (if required), repeater (if required) and the distributed 
antennas, if the system defy is measured a each distributed antenna and the values stored in a location database, including each 
antenna identification, and ma physical location (in three dimensions), then during a location request, all fixed delays will be 
known, thus the TP value an be determined by subtracting the fixed, known delay values from Ti, the measured time of arrival. 

S The TP value can now be used to determine a TOA ami or a TDQA value in a manner simitar to the non-distributed antenna case, 
thus location can be determined based on these TOA/TDOA ranging values. 

The required installation methods and procedures required to support wireless location are illustrated in Fig. 6: 
Methods and Procedures for DA Installation. By following these methods, the Location Center (LQ will contain a database 
populated with the necessary data values to perform accurate location estimates within the building containing the distributed 

10 antennas, fig. DA-IO: Exemplary DA Location Database, illustrates typically data element types and values required in the DA 
location estimate model database, fig. DA-I I illustrates how a simple TOA location estimate model an be used to determine 
wireless location in a DA environment Based on the known geometry and coverage areas of each DA cell and the percentage of 
maximum radius, determined by the above classification, it is possible to construct radius-radius circles of the DA celts. The 
intersection of the three circles (in this case) provides the location estimate. 

1 5 In order for the TOA and TDQA location calculations to be determined, h is a necessary condition that during 

distributed antenna installation, the minimum values of the Delay Elements be set to each exceed the maximum practical (Le., 
within the coverage area) TP values he at least 1/2 of a PN chip duration (about 500 nanoseconds), to easily allow for the CDMA 
Data Receivers to be able to correlate between the delay element values and the TP delay values. Fig. 12: DA Delay Spread Ranges, 
illustrates typical maximum ranging variable delay values (e^., up to 1,960 feet) if S00 nanosecond guard zones (t) are used. If 

20 larger ranging values are required, then guard zone delays must be increased proportionally. 

Fig. 13: DA Cell Layout and Geometry, illustrates, for DA omnkeil sizes with a radius of about 2,000 feet and guard 
zones of S00 nanoseconds, that the minimum required cumuhtive delay values for the delay elements are: a = 2.46 
microseconds, t 3 = 492 mS, and t< = 738 mS, respectively. 

It should also be noted that a maximum upper bound exists for the maximum amount of cumulative system 

25 propagation delay which on be tolerated by the DMA mobile station. The total delay cannot exceed an amount that would 

interfere with the next pilot PN offset, or substantially deby the scanning time of the search receiver in the mobile station. In any 
case, JO to 40 microseconds of total deby is acceptable, and would allow for a relatively large number of distributed antenna 
components to be included, thus no unusual impacts are required of the system to accommodate location methods. 

By purposefully introducing a relatively large amount of delay in the distributed antenna delay elements, relative to the 

30 maximum permissible TP deby values, it is possible to utilize the large Deby Element values to uniquely identify the distributed 
antenna ID, and thus via the distributed antenna database, to determine the antennas' exact location. Knowing the antenna's 
location and TP value (last stage of propagation deby), TOA and TDQA ranging an be achieved, and thus mobile station location 
within a disunited amena CDQffDntnn^anbedetermiaed. 
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fig. 14: Actual Measurements ami Classification, illustrates bow CDMA delay spread measurements are used in a DA 
configuration to form a relationship with the mo bite station location with respect to the DA locations. Although the CDMA air 
interface standard only requires the signal strength and time of arrival of the first useable delay spread signal to be reported from 
the mobile station to the RS, assume here that the mobile station has the capability to provide the BS, and consequently the LC, 
S with a list of all peak values of CDMA fingers. 

Assume that the mobile station detects and telemeters three CDMA finger Rf measurements, as shown in the table below, 
New Message Type Data Structure Content 


S renal Strength 

Delay Time of Arrival 

-77d6m 

I.6B microseconds 


3.98 

-9S 

9.16 


Table: New Message Type Data Structure Content. 


Note that the measurements may be averaged over a sample space of 128 individual measurements. Referring now back 
10 to Fig. 14, it can be seen that the first finger is associated with the DA cell-l t range 0 to 1.96 microseconds, and DA cell-2, range 
146 microseconds to 4.42 uS, and DA ceH range 738 to 934 uS. Since the DA cell antennas are fixed, with known locations, 
correlation's can be derived and established to relate actual measurements with locations. Any one of several location estimate 
modules may be used, as shown in fig. DA-12: location Estimate using the radius-radius method, or multiple invocations of 
different modules may alternatively be used to form a location estimate of the mobile station within the DA environment. 
IS It is now possible to dassify the above actual measurements as propagation delayed signals (or the DA cells 1 , 2, and 4, 

since each DA all delay range is know, and sufficient guard zones exist between delay spread ranges to unambiguously classify the 
measurements, and thus to determine mobile station location. The following table illustrates a typical database containing the 
classification columns for each DA cell and their corresponding location in an x,y plane. 


DA Cell ID 

Location (X, Y) tn 

DA Cell Radius 

Low Range ( 
microseconds) 

HiEh Ranee (In 

feet) 


microseconds) 


m 

1.96 

0 

1.96 

2 

(-20.3000) 

1.96 

2.46 

4.42 

3 

(4000,2800) 

1.96 

4.92 


4 

(1600,2800) 

1.96 

738 

934 


20 Table: few Message Type Data Structure Content 

Translating the actual delay measmments into a percentage of the maximum radius of each cell (Le., cell I radius 
actual b 88 %, cell 2 radius actual b 78 %, and cell radius 4 actual b 91%) provides wireless location using familiar radius-radius 
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Depending upon the combinations of embodiments, the Location Center and Gateway may contain from one to three 
interfaces into the digital PCS network, shown as interfaces X, Y, and 2, in Fig. 24, Location ami CTIA/TR45 Network Reference 
HodeL Network interface reference points Urn, A, Ai, B, C, 0 and H are part of the Cellular Telecommunications Industry of America 

S (CTIA)/Technical Reference 45 standards, aid are not discussed farther. 

Network interface reference point X provides a direct connection to the mobile switch center, osed for transferring RF 
measurement sig nab from the mobile station and BS to the LC and for transferring location control between the LS and mobile 
station, and between the LC and BS. This interface can be implemented via any number of data communications circuit 
configurations and protocols in current use, such as a T-carrier data circuit, with DSU/CSUs at each end, using an intranet/internet 

10 protocol suite, such as TCP/IP, RPC messaging, or other middleware solutions, such as Pipes, IBM HQ series, work) wide web 

protocols, such as JAVA/VRML scripts, hypertext markup language (HTML) finks, and may also include various firewall schemes and 
data encryption mechanisms, etc, in order to communicate asynchronous messaging among the endpoints, and in particular, in 
reference to the final distribution of the location information to the desired end user. 

Network interface reference point Y is osed in the embodiment wherein a public switched telephone network interface is 

IS required or desired. This interface is a straightforward method to support location applications wherein, for example, a mobile 
station user dials a telephone number in order to initiate a location req uest, and could also be used to telemeter RF measurement 
and location control messages between the LC and the mobile station/BS. Alternatively a timer-initiated process internal to the LC 
may be used to start a location request, or via any number of events external to the network. Point Y also has the advantage of not 
requiring a direct connection to a commercial radio mobile service providers* network elements, thus affording a convenient 

20 interface for use by third party location service providers unrelated to the commercial radio mobile service provider. 

NATIONAL SCALE WIRELESS LOCATION 

By utilizing specific data items used in the Home Location Register in the Advanced Intelligent Network, it is possible to 
determine the mobile station location on a national scab, Le., location within the context of a state, and in which city. 

Network interface reference point Z is used in the embodiment wherein a gross location must be determined. A gross 
25 location is defined as an area associated with a particular mobile switch center coverage area. HobBe switch center coverage areas 
are typically bounded by a large metropolitan area, such as a chy. The Home Location Register (HLR) contains gross location 
information. The Z interface allows the LC to query the home location register to determine if the user is in their M home area, or 
whether the user is roaming to another mobile switch center coverage area, such as another city. IS-4 1 Cellular Radio 
Telecommunications intersystem operations communications protocols provide mechanisms that allow a user to roam into 
30 authorized areas outside of their "borne* area. 

II the user is roaming in another area, then the LC can use that information to initiate location control messages toward 
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the CDMA network currently hosting the mobile station user. fig. 25 illustrates how a user based in Los Angeles, CA, for example, 
may roam to a CDMA system New York City, and be "located" within that metropolitan area, through a data communications 
network and a national Location Center Clearinghouse system. 


5 SIGNAL PROCESSOR SUBSYSTEM 

The signal processing subsystem receives control messages and signal measurements and transmits appropriate control 
messages to the wireless network via the location applications programming interface referenced earlier, for wireless location 
purposes. The signal processing subsystem additionally provides various signal idinrifkaooa, conditioning and pre-processing 
functions, including buffering, signal type classification, signal filtering, message control and routing functions to the location 
10 estimate modules. 

There can be several combinations of Delay Spread/Signal Strength sets of measurements made available to the signal 
processing subsystem 20 within the Location Center/System 42 f shown in Fig. 3. In some cases the mobile station MO may be able 
to detect up to three or four Pilot Channels representing three to four Base Stations, or as few as one Pilot Channel, depending upon 
the environment Similarly, possibly more than one BS 122 can detect a mobile station 140 transmitter signal, as evidenced by the 
15 provision of cell diversity or soft land-off in the CDMA standards, and the fact that multiple CMRS* base station equipment 
commonly will overlap coverage areas. For each mobile station 1 40 or BS 122 transmitted signal detected by a receiver group at a 
station, multiple delayed signals, or "fingers" may be detected and tracked resulting from multipart radio propagation conditions, 
from a given transmitter. 

In typical spread spectrum diversity CDMA receiver design, the "first** finger represents the most direct, or least delayed 
20 multipart signal. Second or possibly third or fourth fingers may also be detected and tracked, assuming the mobile station contains 
a sufficient number of data receivers. Although traditional TOA and TDQA methods would discard subsequent fingers related to the 
same transmitted finger, collection and use of these additional values can prove useful to reduce location ambiguity, and are thus 
collected by the Signal Processing subsystem in the Location Center 141 

For each pilot channel detection case, multiple fingers (up to three or four) may be detected and thus reported to the 
25 Location system, as shown in fig. 22 and 23, for dense urban and rural settings, respectively. From the mobile receiver's 

perspective, a number of combinations of measurements could be made available to the location Center. Table SP-I illustrates the 
available combinations for three and four receiver cases, respectively. 
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Me SP-I: Nominal CDMA Location Measurement Combinations 

he above Table SP-I scenario assumes that tbe mobile station design and data collection structure only permits a 1:1 
correspondence to exist between the number of base stations detected and tbe number of data receivers reporting multipath CDMA 
fingers. 

Table SP-I fflustrates the potential combinations of detected CDMA signals representing multipath fingers and total 
number of detectable base station pilot signals in a given location within the radio coverage area 1 20. Due to the disperse and 
near-random nature of COMA radio signals and propagation characteristics, traditional T0A/TD0A location methods have failed in 
the past, because the number of signab received in different locations area different In a particularly small urban area, say less 
than S00 square feet, the number of RF signals and there multipath components may vary by over 1 00 percent. 

The following diagrams illustrate a certain case from a location measurement perspective, of signab received for a three 
-data receiver and a four-data receiver configuration, in a nominal three sector honeycomb base station configuration. In Fig. 1 8, a 
mobile station at location "A" detects base stations lb, 5c, and 4a. However although a triad oi signals are received, if varying 
multipath signab are received from one or more base stations, then ambiguity an still result Fig. 19 illustrates a mobile station 
located at position "A", detecting hose stations I b, Sc, 4a, and 2c Although additional information is made available in this second 
case, traditional hyperbolic combinations taken three at a time, yield multiple location estimates. In certain cases the limit of the 
back-side of a M far-away"seaored antenna can be used to determine tbe bnit of RF coverage in another base station sector area. 
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Fig. 20 shows that normally a delay spread in actor I b would imply a range of a 120 degree solid angle. However by using the 
known fad that base station sector 2a contains a coverage limit, such negative logic can be used to further restrict the apparent 
coverage area in sector Ib> from 120 degrees to approximately 90 degrees as shown in the illustration, m order to locate the mobile 
station B. Such information regarding sector 2a can be determined by collecting the remaining set information from mobile station 
5 B. 

How consider more practical, less ideaJ cases. Due to the large capital outlay costs associated with providing three or 
more overlapping base station coverage signals in every possible location, most practical digital PCS deployments result in fewer 
than three base station pilot channels being reportable in the majority of location areas, thus resulting in a larger, more amorphous 
location estimate, fig. 20 and 21 illustrate a typical relative error space wherein a mobile station detects only two base station pilot 
10 channels, and only one pibt channel, respectively. This consequence requires a family of location estimate location modules, each 
firing whenever suitable data has been presented to a model, thus providing a location estimate to a backend subsystem whkh 
resolves ambiguities. 

Base Station Cell site planning tools which utilize antenna gain radiation patterns, environmental clutter, such as 
IS buildings, dense forests, terrain heights, etc, can provide reasonable training data to bootstrap the initial operation of the LC 

An example of the types of (fata typically collected during field tests/runs is shown in the following database table SP-2 

below: 


Column 
Position 

Mobile Data Test Set: Data Type Logged 

1 

CDMA Time (absolute, from GPS) 

2 

Vehide Speed (in mph) 

3 

Vehide Latitude (in deg. North) 

4 

Vehide Longitude (in deg. East) 

5 

GPS Source (binary, &g„ GPS or Dead Reckoning) 

6 

GPS Data available indicator (binary states) 

7 

f irst BS-Mobile Received Power (in dBm, 1 second averages) 

8 

Mobile transmit Gain Adjust (in dBm, 1 second average) 

9 

First BS Mobile Rx Pilot EA>(dB, 1 second average) 

10 

First BS Mobile received Frame Counts (integers per measurement period) 

II 

Mobile ringer's Average Tune Separation (in nano/rnkroseconds) 

12 

Noble Fingers' Maximum Time Separation (in nanoAntcroseconds) 

\l 

Mobfle Fingers' Itomber of Pilots locked (per 1 second average) 
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Column 
Position 

Mobile Data Test Set: Data Type Logged 

14 

Mobile finger Lock Counts 

IS 

First BS Received Frame Counts 

16 

First BS Eb/No set Point (in dB, 1 second average) 

17 

First BS cell fix Eb/No per antenna (in dB, 1 second average) 

18 

Hand-off State (relative to the First, or connecttd-to BS) 

19 

First BS Traffic Channel Gain 

20 

First BS Power Control Subchannel Gain 

21 

First BS Reverse Link full Frame Error Rate, over 500 frames 

22 

Forward Link full Frame Error Rate, over 500 frames 

23 

First BS Pilot Channel Delay Spread (in nanoseconds) 

24 

Second BS-Aanked Pilot Delay Spread (in nanoseconds) 

25 

Second BS-fcwked Pilot Relative Signal Strength (in dB) 

26 

Third BS-Ranked Pilot Delay Spread 

27 

Third BS-Ranked Pilot Relative Signal Strength (in dB) 

28 

Mobile Antenna Identification (m the case of a multi-sectored antenna) 

29 

Vehicle compass orientation (bearing or heading) 

30 

Mobile Station Power Class (an integer, 0-7, indicating max. power capabilities o( the mobile station 
transmitter) 


Table SP-2: Typical CDMA Field Test Measurements 

Although the forward fink mobile station's received relative signal strength (RRSS^) of detected nearby base station 
5 transmitter signals an be used directly by the location estimate modules, the base station's reverse fink received relative signal 
strength (RRSSm) of the detected mobile station transmitter signal must be modified prior to location estimate model use, since the 
mobile station transmitter power level changes nearly continuously, and would thus render relative signal strength useless for 
location purposes. 

One adjustment variable and one factor value are required by the signal processing subsystem: I .) instantaneous 
10 relative power level in d&m (IRPL) of the mobile station transmitter, and 2.) the mobile station Power Class. By adding the IRPL to 
the MISS,* a synthetic relative signal strength (SRSS*) of the utile station 140 signal detected at the BS 122 is derived, which 
can be used by location estimate moddanalyih, as shown beto 
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SRSShs = RRS^ + IRPL fmdta) 

SRSS^ a corrected indication of the effective path too in the reverse direction (mobile station to BS), h now comparable 
with RRSSfl and can be used to provide a correlation with either distance or shadow fading because it now accounts for the change 
S of the mobile station transmitter's power leveL The two signals RR$S B and SRSS m can row be processed in a variety of ways to 
achieve a more robust correlation with distance or shadow fading. 

Although Rayleigh fading appears as a generally random noise generator, essentially destroying the correlation value of 
either RRSS^ or SRSS m measurements with distance individually, several mathematical operations or signal processing f unctions 
can be performed on each measurement to derive a more robust relative signal strength value, overcoming the adverse Rayleigh 
10 fading effects. Examples include averaging, taking the strongest value and weighting the strongest value with a greater coefficient 
than the weaker value, then averaging the results- This signal processing technique takes advantage ol the fact that although a 
Rayleigh fade may often exist in either the forward or reverse path, it is much less probable that a Rayleigh fade also exists in the 
reverse or forward path, respectively. A shadow fade however, simiiiarly affects the signal strength in both paths. 

At this point a CDMA radio signal direction-independent "net relative signal strength measurement* 1 is derived which is 
IS used to establish a correlation with either distance or shadow fading, or both. Although the ambiguity of either shadow fading or 
distance cannot be determined, other means can be used in conjunction, such as the fingers of the CDMA delay spread 
measurement, and any other TOA/IDOA calculations from otter geographical points. In the case of a mobile station with a certain 
amount of shadow fading between its BS 122 (Pig. 2), the first finger of a CDMA delay spread signal is most likely to be a relatively 
shorter duration than the case where the mobile station 140 and BS 122 are separated by a greater distance, since shadow fading 
20 does not materially affect the arrival time delay of the radio signal. 

By performing a small modification in the control electronics of the CDMA base station and mobile station receiver 
circuitry, it is possible to provide the signal processing subsystem 20 (reference Fig. I) within the Location system 42 (Fig. I) with 
data that exceed the one-to-one CDMA (Way-spread fingers to data receiver correspondence. Such additional information, in the 
form of additional CDMA fingers (additional muhipath) and all associated detectable pilot channels, provides new information 
25 which is used to enhance to accuracy of the Location Center's location estimate location estimate modules. 

This enhanced capabHity is provided via a control message, sent from the location system 42 to the mobile switch 
center 12, and then to the base stat»n(s) 122 (Fig. 2) in communication with, or in dose proximity with, mobile stations 140 to be 
located. Two types of location measurement request control messages are needed: one to instruct a target mobile station 140 (Le., 
the mobile station to be located) to telemeter its BS pilot channel measurements back to the primary BS 122 and from there to the 
JO mobile switch center 1 12 and then to the location system 42. The second control message is sent from the location system 42 to the 
mobile switch center 1 12, then to first the primary BS 122, instructing the primary BS* searcher receiver to output (i.e. return to 
the initiating request message soma) the detected target mobile station 140 transmitter CDMA plot channel offset signal and their 
corresponding dehy spread finger (peak) values and related relative signal strengths. 

43 

SUBSTITUTE SHEET (RULE 26) 


WO 98/10538 PCT/US97/15933 

The control messages are implemented in standard mobile station 140 and BS 122 CDMA receivers such that all data 
results from the search receiver and multiplexed results from the associated data receivers are available for transmission back to 
the Location Center 141 Appropriate value ranges are required regarding mobile station 140 parameters T_ADD lt T_DR0P,, and 
the ranges and values for the Active, Neighboring and Renaming Pibt sets registers, held within the mobile station 140 memory. 
5 Further mobile station 140 receiver details have been discussed above. 

In the normal case without any specific multiplexing means to provide location measurements, exactly how many COMA 
pilot channels ami delay spread fingers can or should be measured vary according to the number of data receivers contained in 
each mobile station 140. 

As a guide, h is preferred that whenever RF characteristics permit, at least three pilot channels and the strongest first 
10 three fingers, are collected ami processed. 

From the BS 122 perspective, it is preferred that the strongest first four COMA delay spread fingers and the mobile 
station power level be collected and sent to the location system 42, for each of preferably three BSs 1 22 which can detect the mobile 
station 140. 

Table SP-3 illustrates the resulting extended combinations of BS signals (pilot channels) and finger measurements 
IS potentially available, based on the above preferred conditions. The philosophy is to collect as much reasonable data as is practical, 
given the constraints of CDMA receivers, search times, receiver memory storage and available CPU and data transmission 
bandwidth, in order that sufficient orthogonal information can be processed to minimize location estimate error. 
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Table SP-3: Extended CDMA Location Measurement Combinations 

As on be seen from tbe table, a much larger combination of measurements is potentially feasible using the extended 
5 data collection capability of the CDMA receivers. In the case of the last row shown, additional combinations are also possible using a 
similar scheme of allocating the number of CDMA fingers detected at the first or strongest BS, followed by the second strongest base 
station, then the third strongest base station, etc 

Fig. 29 illustrates the components of the Signal Processing Subsystem 20. The main components consist of the input 
qoeue(s) 7, signal dassifieryfirter 9, digital signaling processor 17, imaging fitters 1 9, output queue(s) 21, router/distributor 23, a 
10 signal processor database 26 and a signal processing controller IS. 

Input queues 7 are required in order to stage the rapid acceptance of a significant amount of RF signal measurement 
data, used for either location estimate purposes or to accept autonomous location data. Each location request using fixed base 
stations may, in one embodiment, contain from I to I2B radio frequency measurements from tbe mobile station, which translates 
to approximately 61.44 kilobytes of signal measurement data to be collected within 1 0 seconds and I2B measurements from each of 
I S possibly four base stations, or 24SJ6 kilobytes for all base stations, for a total of approximately 640 signal measurements from the 
five somas, or 3072 kilobytes to arrive per mobile station location request in 10 seconds. An input queue storage space is assigned 
at the moment a location request begins, in order to establish a formatted data structure in persistent store. Depending upon the 
urgency of tbe time required to render a locatbn estimate, fewer or more signal measurement samples can be taken and stored in 
the input queue(s) 7 accordingly. 
20 The signal processing subsystem 20 supports a variety of wireless network signaling measurement capabilities by 

detecting the capabilities of the mobile and base station through messaging structures provided bt the location application 
programming interface 14 in f I Detection is accompTished in the signal classifier 9 (Fig. 29) by referencing a mobile station 
fr tt ta tt table within tbe signal processor database 26, which provides, given a mobile station identification number, mobile 
station revision code, other mobile station dnractenhks. Similiarty, a mobile switch center table 3 1 provides MSC characteristics 

46 


SUBSTITUTE SHEET (RULE 26) 


WO 9*10538 PCT/US97/15933 

and identifcations to the signal dassifieryHter 9. The signal dasafer/fiter adds additional message header information that 
further dassifa the measurement data which allows the dighai signal processor and image fitter opponents to select the proper" 
internal processing subcomponents to perform operations on the signal measurement data, for use by the location estimate 
modules. 

5 Regarding service control point messages autonomously received from the input queue 7, the signal classifier/filter 9 

detemines via a signal processing database 26 query that the message is to be associated with a home base station module. Thus 
appropriate header information is added to the message, thus enabling the message to pass through the digital signal processor 17 
unaffected to the output queu 21, and then to the router/fistributor 23. The router/distributor 23 then routes the message to the 
HBS module 6 shown in Fig. I. Those skilled in the art will understand that associating location requests from Home Base Station 

10 configurations require substantially less data: the mobile idemifkation number and the associated wireline telephone number 
transmission from the home location register are on the order of less than 32 bytes. Consequentially the home base station message 
type could be routed without any digital signal processing. 

Output qaeue(s) 21 are required for similar reasons as input queues 7: relatively large amounts of data must be held in a 
specific format for further location processing by the location estimate modules. 

15 The router and distributor component 23 is responsible to directing specific signal measurement data types and 

structures to their appropriate modules. For example, the HBS module has no use for digital filtering structures, whereas the TDOA 
module would not be able to process an HBS response message. 

The controBer 15 is responsfck for staging the movement of data among the signal processing subsystem 20 components 
input queue 7, digital signal processor 17, router/distributor Band the output queue 21 , and to initiate signal measurments within 

20 the wireless network, in response from an internet 68 location request message in fig. I, via the location application programming 
interface 14. 

In addition the controller IS receives autonomous messages from the HSC , via the location applications programming 
interface 14 (fig. I) or WW and the input queue 7, whenever a 9-1-1 wireless call is originated. The mobile switch center provides 
this autonomous notification to the location system as follows: By spedfiying the appropriate mobile switch center operations and 

25 maintenance commands to surveil calls based on certain digits dated such as 9-1-1, the location applications programming 

interface 14 (fig. I), in commnnkations with the HSC 12a ami 12b in fig.l, receives an autonomous notification whenever a mobile 
station user dials 9-1-1. Specifically, a bi-directional authorized communications port is configured, usually at the operations and 
maintenance subsystem of the HSC 12a and 12b in Fig. I , or with their associated network element manager system(s), with a data 
circuit, such as a DS-I, with the location applications programming interface 14 in Fig. I. Next, the "all trace" capability of the 

30 mobile switch center is activated for the respective communications port The exact implementation of the vendor-specific man- 
machine or Open Systems Interface (OSI) commands(s) and their associated data structures generally vary among MSC vendors, 
however the trace function is geoeraBy available in various forms, aid is required in order to comply with Federal Bureau of 
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Investigation authorities for wire tap purposes. After the appropriate surveillance commands are established ontheMSC, such 9-U 
call notifkations messages containing the mobile station identification number (HIH) and, in phase I E9-I -I implementations, a 
pseudo-automatic umber identication (aJca. pANI) which provides an association with the primary base station in which the 9-1- 
I caller is in commonkaiton. In cases where the pANI h known from the onset, the signal processing subsystem avoids querying the 
S NSC in question to determine the primary base station identification associated with the 9-1-1 mobile station caller. 

After the signal processing controller IS receives the first message type, the autonomous notification message from the 
mobile switch center 1 12 to the location system 42, containing the mobile identification number and optionally the primary base 
station identification, the controller IS queries the base station table 13 in the signal processor database 26 to determine the status 
and ava3abilhy of any neighboring base stations, including those base stations of other CMS in the area. The definition of 

10 neighboring base stations include not only those within a provisional^ "hop" based on the cell design reuse factor, but also 
includes, in the case of (DMA, results from remaining set information autonomously queried to mobile stations, with results stored 
in the base station table. Remaining set information indicates that mobile stations can detect otter base station (sector) pibt 
channels which may exceed the "hop" distance, yet are nevertheless candidate base stations (or sectors) for wireless location 
purposes. Although cellular and digital cell design may vary, "hop" distance b usually one or two cell coverage areas away from the 

IS primary base station's cell coverage area. 

Having determined a likely set of base stations which may both detect the mobile station's transmitter signal, as well as 
to determine the set of Btely pilot channels (Le^ base stations and their associated physical antenna sectors) detectable by the 
mobile station in the area surrounding the primary base station (sector), the controller IS initiates messages to both the mobile 
station and appropriate base stations (sectors) to perform signal measurements and to return the results of such measurements to 

20 the signal processing system regarding the mobile station to be located. This step may be accomplished via several interlace means. 
In a first case the controller IS utilizes, for a given HSC, predetermined storage information in the HSC table 31 to determine which 
typed commands, sudi as man-nochine commands are needed to request such signal measurements for a given HSC 12a 
or 12b m fig. I. The controller generates the mobile and base station signal measurement commands appropriate for the HSC and 
passes the commands via the input queue 7 and the locations application programming interface 14 in Fig.l, to the appropriate HSC 

2S 12a and 12b, icing the authorized communications port mentioned earlier. In a second case the controller IS communicates directly 
with base stations as discussed above and shown in fig. S, Location Center-base station access, multiple CHRS, in this second case 
an alternative embodiment is provided to directly extract the wireless location signal measurement data from each base station 
associated with each of multiple CHRS networks within having to interface directly with the HSC for signal measurement extraction. 

Upon receipt of the signal measurements, the signal classifier 9 examines location application programming interface- 
30 provided message header mfonnatioi from the source of the location measurement (for example, from a Toed BS 122, a mobile 
station 140, a districted antenna system 168 or message location data related to a home base station), provided by the location 

48 


SUBSTITUTE SHEET (RULE 26) 


WO 98/10538 PCTAJS97/15933 

appfeanom programming interface (L-API) via the input queue 7 and determines whether or not device filters 17 or image filters 
19 are needed, and assesses a relative priority in processing, sucb as an emergency versus a background location task, in terms of 
grouping fib data associated with a given location request In the case where multiple signal measurement requests are 
outstaying for various base stations, some of which may be associated with a different CMRS network, ami additional signal 

S dasrifar function tndudes sorting and associating the appropriate incoming signal measurements together such that the digital 
signal processor 17 processes related measurements in order to build ensemble data sets. Such ensembles allow for a variety of 
functions such as averaging, outlier removal over a omeperiod, and related filtering functions, and further prevent association 
errors from occuring in location estimate processing. 

Another function of the signal dassifer/low pass filter component 9 is to filter information that is not useable, or 

10 information that could introduce noise or the effect of noise in the location estimate modules. Consequently tow pass matching 
filters are used to match the in-common signal processing components to the characteristics of the incoming signals. Low pass 
filters match: HobBe Station, base station, CMRS and NSC characteristics, as wall as to classify Home Base Station messages. 

The signal processing subsystem 20 is fig. I contains a base station database table 13 (fig. 29) which captures the 
maximum number of CDKA delay spread fingers for a given base station, containing information structures as shown in table SP-4 

IS below: 


Primary Base 

Station 

Identification 

Latitude, 

Longitude, 

elevation 

PRot Channel 
Offset 

BS 

Identifier 
code 

Maximum No. of 
CDMA ringers 

DEN-001 


5 

CODENABC00I 


DEN-002 

M> r 

25 

CODENABC002 


DEN-003 


20 

CODEHABC003 


DEN-004 

a,b,c 

IS 

C0DENABC004 


BLD-OOS 

<Uf 

45 

COBLDABCDK 








Table SP-4: Base Station Characteristics 


The base station identification code, or Oil or common language level identification code is useful in identifying or 
20 relating a human-labeled name descriptor to the Base Station, latitude. Longitude and elevation values are used by other 
subsystems m the location system for calibration and estimation purposes. As base stations ami/or receiver characteristics are 
added, deleted, or changed with respect to the network used for location purposes, this database table must be modified to reflect 
the current network configuration. 

Just as an upgraded base station may detect additional CDHA delay spread signals, newer or modified mobile stations 
25 nay detect additional pilot dtasneb or CD HA delay spread fingers. Additional ly different makes and modeb of mobile stations may 
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acquire improved receiver senativid^ Jesting a greater coverage cajabifity. The tabfc below establishes the relationships 
among various mobile nation equipment suppliers and certain technical data relevant to this location invention. 

Although not strictly necessary, The N1N can be populated in this table from the PCS Service Provider's Customer Care 
system during subscriber activation and fulfillment, and could be changed at deactivation, or anytime the end-user changes mobile 
S stations. Alternatively, since the NIK, manufacturer, model number, and software revision level information is available during a 
telephone call, this information could extracted during the call, and the remaining fields populated dynamically, based on 
manubcturerY specifications information previously stored in the signal processing subsystem 20. Default values are used in cases 
where the HIN is not found, or where certain information must be estimated 


Mobile Station 

Identification 

(MM) 

Manufact- 
urer 

nooei 
No. 

Allowed 
WW 
Revision 
Levels 

Maximum 
No. of 
CDMA 
fingers 

Maxim 
urn No. 
of 

Pilots 

Detecta 

We 

Transmit 
Power 
Class 
(Max) 

fee. 

Thermal 
Noise 
Hoor 
(dBm) 

3034S6IB4567 

Sony 

S 

RIJ) 

3 

3 

2 

-114 

303456I2345&8 

Quakomm 

25 

R2DI 

4 

4 

4 

-115 

J03456I234S69 

Panasonic 

20 

RIJ 

3 

3 

5 

-113 

MB436I234S70 

fujutshu 

IS 

125 

4 

4 

0 

•116 

3034S6I234S7I 

Soiy 

45 

RIJ 

3 

3 

7 

•115 

Default 

Default 

Default 

RIJ) 

3 

3 

3 

•112 


10 Table SP-5: Mobile Station Characteristics Table 

A tow pass mobile station fiber, contained within the signal classifier/tow pass filter 9 of the signal processing 
subsystem 20, uses the above labfe data to perioro functions: I) was a low pass filter to adjust the nominal 

assumptions rebted to the maximum number of CDHA fingers, plots detectable; and 2) to determine the transmit powe r dass and 
IS the receiver thermal noise floor. Oven the detected reverse path signal strength, the required value of SRSS^ a corrected 

indication of the effective path loss in the reverse direction (mobile station to BS), can be calculated based on the SP-5 table data 
contacted within the mobitest^^ 

The effects of the maximum Number of CDHA fingers allowed and the maximum number of pilot channels allowed 
essentially form a low pass filter effect, wherein the least common denominator of characteristics are used to fdter the incoming Rf 
20 signal measurements such that a oae for one matching occurs. The effect of the Transmit Power Class and Receiver Thermal Noise 
fborvahiesistotioraafotbecta^ signals used. 

Fig. 4, location ProviskmiBg from Multiple QtRSs, illustrates a system architecture to enable the customer care systems 
belonging to different CMRSs, either on an autonomous or periodic basis, to update a provisbnabte signal processing database 26, 
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containing the mobile station characteristics, in communication with the signal classifier/filter 9, input queue 7, and the location 
appfeations programming interface for customer casre systems (l-API-CO) 139. The signal dassifier/filter 20 is in communication 
with both the input qucas 7 and the signal processing database 26. In the earlf sta^ of a location request the signal processing 
subsystem 142 in fig. 4, will receive the initiating location request from either an autonomous 9*1-1 notification message from a 

S given NSC, or from a location application (for example, see Fig. 36), for whkb mobile station characteristics about the target 
mobile station 140 (Fig. 2) is required. Referring to Fig. 29, a query is made from the signal processing controller IS to the signal 
processing database 26, specifically the mobile station table 1 1, to determine 'rf the mobile station characteristics associated with 
the HIM to be located is available in table I L if the data exists then there is no need for the controller I S to query the wireless 
network in order to determine the mobile station characteristics, thus avoiding additional real-time processing which would 

10 otherwise be required across the air interface, in order to determine the mobile station HIN characteristics. The resulting mobile 
station information my be provided either via the signal processing database 26 or alternatively a query may be performed directly 
from the signal processing subsystem 20 to the HSC in order to determine the mobile station characteristic. 

A location application programming interface, L-API-CO 139 to the appropriate CHRS customer care system provides 
the mechanism to populate and update the mobile station table 1 1 within the database 26. The l-API-CO 139 contains its own set 

I S of separate input and output queues or similar implementations and security controls to ensure that provisioning data is not sent 
to the incorrect CHRS. The interface I ISSa to the customer care system for CHRS-A 1150a provides an autonomous or periodic 
notification and response appfxation layer protocol type, consisting of add, delete, change and verify message functions in order to 
update the mobile station table 1 1 within the signal processing database 26, via the controller IS. A similar interface 1155b is used 
to enable provisioning updates to be received from CHRS-B customer care system 1 150b. 

20 Although the L-API-CG application message set may be any protocol type which supports the autonomous notification 

message with positive acknowledgment type, the TIHIi group within the American National Standards Institute bas defined a 
good starting point in which the L-API-CO could be implemented, using the robust OSI THN X-imerface at the service management 
layer. The object model defined in Standards proposal number Tl HI5/96-22R9, Operations Ad/nwistrathiK Maintenance, and 
Pnmshmng(QAN&P) - Model } f^lmhaAamjmbdkm^B(mda!ksUi Support Electronic Access Service Ordering Inquiry 

25 function can be extended to support the L-API-CO information elements as required and further discussed below. Other choices in 
which the l-API-CG application message set may be implemented include ASCII, binary, or any encrypted message set encoding 
using the Internet protocols, such as TCP/IP, simple network maiagement protocol, bttp, https, and email protocols. 

Referring to the digital signal processor (DSP) 17, in communication with the signal dassrfierAP fiber 9, the DSP 17 
provides a time series expansion method to convert non-HBS data from a format of an signal measure data ensemble of time-series 

30 based radio frequency data measurements, collected as discrete time-slice samples, to a three dimensional matrix location data 
value image representation Other tedmiques further filter the resultant image in order to furnish a less noisy training and actual 
data sample to the hxatioi estimate modules. 

Referring now to digital sigral and im^ mobile station 
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deby spread RF measurement sample is Bhistrated in fig. 22, for the mobile station reception of one sample of transmission signal 
retzted to BS-I , located at 16th and Stout Streets. In this sample three fingers or groups of Rf energy (relative signal strength is 
indicated along the vertical axis) were detected. A first CDMA finger was found at a delay of about 3.4 microseconds, and relative 
signal strength of about -SO dBm. A second finger was found at a delay of about S microseconds, and peak strength of about -SS 
S dBm, followed by a third finger at 6J> microseconds and a strength of about -92 dBm. Two other base stations were detected, BS-S 
and BS-2, along with their respective three CDMA delay spread fingers. 

Refer now to the left image shown in fig. 26: Delay Spread Profile Image. After 128 samples of data are collected of the 
delay spread-relative signal strength RF data measurement sample: mobile station RX for BS-I and grouped into a Quantization 
mztro, where rows constitute relative signal strength intervals and columns define delay intervals. As each measurement row, 
10 column pair (which could be represented as a complex number or Cartesian point pair) is added to their respective values to 
generate a Z direction of frequency of recurring measurement value pairs or a density recurrence function. By next applying a grid 
function to each x v y 9 and z value, a three-dimensional surface grid is generated, which represents a location data value or unique 
print of that 128-sampie measurement fig. 28 illustrates the result of image generation when a number of data samples, or an 
ensemble of signal strength, delay pans of values are added within a given bin area or matrix, to thus create a type of three- 
15 dimensional image, representing a particular RF signaling behavior at a given location. 

Refer now to the right image shown in Fig. 26. In the general case where a mobile station is located in an environment 
with varied dutter patterns, such as terrain undulations, unique man-made structure geometries (thus creating varied muhipath 
signal behaviors), such as a city or suburb, although the first CDHA delay spread finger may be the same value for a fixed distance 
between the mobile station and BS antennas, as the mobile station moves across such an arc, different finger-data are measured. In 
20 the right image for the defined BS antenna sector, location classes, or squares numbered one through seven, are shown across a 
particular range of line of position (LOP). 

A traditional TOA/TDQA ranging method between a given BS and mobile station only provides a range abng the arc, 
thus introducing ambiguity error. However a unique three dimensional image can be used in this method to specifically identify, 
with recurring probability, a particular unique location dass along the same Line Of Position, as long as the muhipath is unique by 
25 position but generally repeatabk, thus estabfishing a method of not only ranging, but also of complete latitude, longitude location 
estimation in a Cartesian space. In other words, the unique shape of the "mountain image" enables a correspondence to a given 
unique location cbss abng a line of position, thereby eliminating traditional ambiguity error. 

Although man-made external sources of interference, Rayteigh fades, adjacent and co-channel interference, and 
variable dutter, such as moving traffic introduce unpredictability (thus no "mountain image" would ever be exactly alike), three 
30 basic types of filtering methods can be used to reduce matching/comparison error from a training case to a location request case: 
I.) select only the strongest signals from the forward path (BS to mobile station) and reverse path (mobile station to BS), 1) 
Convolute the forward path I2B ample image with the reverse path 128 sample image, and 3.) process all image samples through 
various digital image filters to discard wise componefts. 
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The strongest signal technique has been rtscussed previously in the data fitter section- Hg. 21: Convolution of forward 
and Rmrse Images, illustrates one method that essential* nulls noise completely. even rf strong and recurring, as long as that 
same noise characteristic does not occur in the opposite path. 

T te tm>d technique of proc^ 

5 resultant -image enhancement" in the sense of providing a more stable pattern recognition paradigm to the neural net location 
estimate model, for e^ image histogram equafeatw 
(after eqoaDzation)to rearrange the images' intensity values, or density re 

histogram is approximately linear. 

Other methods which can be used to compensate lor a concentrated histogram include: I) Input Cropping. 2) Output 

10 Oo PP ingand3)<™ouCon^ 

spread profile inage. Figs 32 and 33 Hhistrate the three dimensional grid images of the before and after input cropping filter 
example, fcs shown in Kg. 33. input cropping removes a large percentage of random signal character^ that are non-recurring. 
Other fitters and** filter combinations can be used to help distinguish between stationary and variable dutter 

affectingmultipaths^ 
15 periodofafewminutessucbfmgenwt.uld.wt^ 
sampk period), and pi.ssibly strong 

a near perfect reflective surface, such as a ijearbyo^ panel trock stopped at a traffKle^ 

On the other band, stationary dutter objects, such as concrete and glass building surfaces, adsorb some radiation 
before continuing witbareflected ray at son^ 

20 wgbtorHdianfil^^ 
fig.33aiustrattr W "pen^ 

34 when subjected to a 4X4 neighbor Median filter and 40 percent dipping, all five pencil-shaped fingers have been deleted. Fig. 35 
ilhBtrates the further simplified result of a 50 percent cropping and 4X4 neighbor median filtering. Other filtenng methods indude 
custom linear fihering, adaptive (Wetner) filtering, and custom nonlinear filtering. 

IS The DSP 17 may provide data emsemble results, such as extracting the shortest time delay with a detectable relative 

signal strength, to the roister/ffistribiitor B. or attematjveljf results may be processed via one or n»re image filters 1 9. with 
subsequent transmission to the router/distributor 23. The router/distributor 23 examines the processed message data from the DSP 
17 and stores routing and c&tribiition tnformatioo in the message header. The router/distributor 23 then forwards the data 
messages to the output queue 2l.br subsequent qoeoiiig to kxation estimators DA module 10. 

30 TfWTDOA module B or the HBS module 6. in Fig. I. 
HOME BASE STATION MODULE 

Upon receiving a message from the Data Capture 6ateway or the signal processing subsystem 20, the HBS location 
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estimate model examines a Hon* Base Station Table which defines relationships among a wireless HIN, and wireline telephone 
number, characteristics of the HBSD, and the possibility to use various signal types in order to further define the location within the 
address area of the fixed location HBSD. The following table, populated by the commercial mobile radio service provider at HBSD 
installation time, b used by the HBS model to determine location whenever the mobile station 140 is looted within communication 
5 range of the HBSD: 


TTITUIK. 

HIN 

Wifeless 
HIN 

HBSD Model 

HBSD location 
Latitude, 

Longitude 

Fixed HBSD Location 

CDMA 

Strength/Delay 
Measurements ? 

Su3x>b\Ly* 

3033661299 

Sony Qx-9000, Ker. I.I 

52.619488 N, 
112.4197601 W 

727HagnofiaDrm,BouWef, 

00 

No 

303S56I236 

303566J200 

(WncPf-l30 t Bev.S.O 

52445488 N, 
112.4197601 W 

1401 Digit Drive, Boulder, CO 

Yes 

3035561236 

3035661240 

P»asonicPf-l30 v Rer.3.4 

52.779488 «, 
112.4197601 W 

1698 fdiom St. Boater, CO. 

No 

3Q3556I2B4 

303S66I205 

P*asonkPF480,Rev.5.0 

5lil9488N, 
111.9197601 W 

990 Hutcracker 0r^ Nrwot.CO. 

NO 

3035561224 

3035661266 

PaiajonitPf.5rX0 ( 8ev.lJ) 

52419558 N, 
112.4197601 W 

5606 BiimarkGrde, Derwer, 
CO 

Yes 








Table HBS-L HBSD Characteristics 


- In the event Rf signals are available for telemetry from the HBSD to the location system, such information may be 
10 solicited from the location system to the HBSD, in the form of a request/response message scheme, using for example, a data- 
under-voke technique. In such cases the SSP provides a data connection with the location system 42 via the PSTN. The home base 
station may interact with the mobile station in the same manner as a cordless telephone transceiver interacts with a cordless 
telephone, when the mobile station is within an acceptable range. 

The HBS module 6 in fig. I outputs the Latitude and Longitude location estiamtes to either the PSTN 24 or to the 
IS Internet 68, dependending upon the source of the origisatiRg location request 

DISTRIBUTED ANTENNA MODULE 

Upon receipt of one or more data ensemble messages from the signal processing subsystem 20 in Fig. I, the distributed 
antenna (DA) module 10 querns a previously popubted distributed antenna database to determine the locations of distributed 
antennas associated with the measured DA antenna "pilot delays" so that the detected signal measurement delay signal values 
20 received from the mobile station receivers and base station receivers can be input to the T0A/TD0A module. The TOA/TDOA module 
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then utilizes the radiuwadim method, or time difference method, in order to provide location estimates within the building or area 
containing the distributed antennas. 

DACEY CHAINING BASE STATIONS 

As a practical matter it may be necessary in some network conditions to add base stations in areas to permit improved 
S estimates to be achieved in wireless location. An aspect in this invention includes daisey chaining communication circuits or 
transport facilities between or among base stations, in order to simplify the installation and operation of such base stations. Base 
stations normally communicate with the mobile switch center using T-anrkr transport facilities, in order to carry voice and data 
bearer traffic, and to transport bi-directional control signals. However for various economic or other reasons h may not be 
justifiable to install such transport fecifities. At the base station, by essentially originating a plurality of mobile telephone alls 

10 using the data communications option, and terminating such calls at the mobile switch center appropriately, the outputs of the 
base station transport multiplex circuits are re-directed into the data communication circuits normally intended for use by mobile 
stations in estabfishing a data circuit communication call to the network. Circuits at the mobile switch center used to terminate 
these data calls, redirect the communication to those circuits normally used to terminate the T -carrier facilities from the base 
stations. In this maimer, existing wireless channels can be used to provide transport via this daisy-chaining method between certain 

IS base stations and the mobile switch center, this simplifying connectivity in cases where the installation of transport facilities would 
either be impossible or impractical. 

DISTANCE FIRST ORDER MODULE (TOA/TDQA) 

Particular distinctions over the current state of the art include utilizing essentially the native electronics, antennas and 
standards, and opposed to overlay solutions, supervisor functions which control a hybrid set of techniques, including Time Of 

20 Arrival (TQA), Time Difference of Arrival (TDOA) in both the forward and reverse paths, pilot signal strengths, power control, 
mobile stations (mobile station) state conditions, stochastic features of environmental dutter, moltipath detection and mitigation, 
and robustness, supporting a variety of conditions including degraded/faulty equipment, distributed and SMART antennas, various 
registration modes, and various call processing conditions such as soft, hard and idle hand-off conditions, location during the idle 
state, traffic-bearing states, and location during cases of severe multipath, such as that experienced in urban canyon environments, 

25 as well as location in suburban and rural cases. 

Since each base station is required to emit a constant signal-strength pilot pseudo-noise (PN) sequence on the forward 
link channel identified uniquely in a network system by a pilot sequence offset and frequency assignment, it is possible to use the 
pilot channels of active, candidate, neighboring and remaining sets of plots, associated with neighboring base stations, stored in 
the mobile station, for TQA and TDOA measurements performed by the mobile station. 

30 Based on the arrival time measurement estimates and the speed of propagation, ranges or range differences between 

the base stations and the mobile station can be calculated. TQA and/or TDQA measurements can then be input to either the radius- 
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radios multHaieratron or the time difference multifeteration algorithms. 

By utfluing the known base station positions, location of the mobile station can be determined. Since measurements 
and base station positions on be sent either to the network or the mobile station, location can be determined in either entity. 

Since not all measurements can provide accurate location results at all times and conditions, a variety of supervisory 
logic processes can be invoked to resolve or litigate the problem area. 

As those familiar with the ElA/TIA IS-95 and TIPI/JTC CDMA standards specifications know, mobile station call 
processing consists of four states: 

I. Initialization State- where the mobile station selects and acquires a system, a network, and timing information. This state 
consists of four substates.- System Determination, Pibt Channel Acquisition, Sync Channel 'Acquisition, and liming Change 
Substatt, 

1 Hk State- where the mobile station monitors messages on the Paging Channel, and supports procedures such as Message 
Acknowledgment, nine modes of Registration, Idle Band-off, Pilot Search, and response to Overhead Information, such as 
System and Access Parameters (wbkh include BS Latitude and Longitude), mobile station Hessage Transmission Operation 
(Le^ Data Bunt) and Neighboring List messages; 

3. System Access State - where the mobile station sends messages to the base station on the Access Channel. This state consists of 
six substates: Update Overhead, Origination Attempt, Page Response, mobile station Order/Message Response, Registration 
Access; Hessage Transmission Operation/Data Bunt); 

4. Mobile station Control on the Traffic darnel State- where the mobile station communicates with the primary base station 
using the forward and Reverse Traffic Channels. This state consists of five substates.' reinitialization. Waiting for Order, 
Waning for mohik station Answer, Conversation (which includes hand-off procedures and earliest arriving usable multipart 
components of pilots), and Release. 

At power-up an IS-9S or TIPI PCS CDMA compliant mobile station enters Initialization State, as described in IS-95, 
section 64.1. During the SystmDeterminathnYfitinb, the mobile station refers to its internal memory io acquire preferences for 
system carrier (A or B), or the preferred carrier at 1 J-LD GHz, and for other types of service, including advanced mobile phone 
service, or AMPS, as well as narrow band advanced mobik phone service, or NAHPS. 

A CDHA-preferred mobile station then transfen to the PiteAqwsitwnlu\tim£. The mobile station tunes to the CDMA 

Channel number equal to QMACH S then sets its Wabh code (always WO) for the Pilot channel where it begins searching for pilot 

energy, in terms of energy per bit, per spectral density. 

Once a sufficiently strong (as defined by the T ADD threshold parameter) pilot channel has been identified within 

T2Q m seconds, the mobile station enten the Sync Channel Aqimhm Substate, where the mobile station receives a Sync channel 

Hessagetim includes, among other information, system time and the unique PN offset index for that particular BS. In the Timing 
Owgr suhstate, the mobile station adjusts its internal timing to match the BS*s CDMA system time. At the completion of the 
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Timing Chaise substate, the mobile station is completely synchronized to the CDHA system's BS time. 

After satisfactory synchronization tbe mobile station then enters the stable Hk State, where the paging channel begins 
to be monitored. 

At this point at least two alternatives are possible: 
S I . Perform Location determination without consumption of user-perceived air time via the introduction of a new call 
processing state* or 

1 Perform Location determination via the traffic channel (requires air time) 

In cases where Distributed Antennas (DAs), and/or Home Base Stations (HBS) are used, each location of these devices 

can be sent to the mobile station. There are at least three format-types possible in conveying this type of location information in 
1 0 the GeoLocation Message. First, A unique identifier can be assigned va each DA/H BS, such as a fully distinguished name. An example 

of location information could be: Within the USA, State of Colorado, city of Denver, with Service Provider xyz, BS ID 129, 

Distributed Antenna number 8. Or more compactly, the location string is structured as, "USA.CO.DEN jyz.129 J)A8*\ Secondly, an 

easy-to-understand human style data message can be sent, such as, "You are near the 30th floor of the Sears Tower building**. 

Third, data values for Latitude, Longitude, and possibly altitude and accuracy could be sent from the BS or Location Center to the 
IS mobile stationAU ("UP denoting . In order to be most easily useful to and end-user, in the first and third cases, a database would 

be needed within tbe mobile station or a Personal Digital Assistant device, which performs a translation of numerical data into a 

form useful for human understanding. 

The mobile station thus maintains a list of location pilot offsets, where the list is ranked based on a weighted 

combination of received signal energy and BS location. The mobile station selects the best candidate BSs for location estimate 
20 purposes, which may be slightly different from the Active, candidate and remaining lists. 

Additionally the mobile station may send a DataBunt message back to the BS or Location Center, informing that no 

other Pilot Channels were detected. This "negative" Venn diagram information may be useful with various heuristics for location 

estimate deduction, for example, to note where tbe mobile station is not located. 

It is the difference of system time values (as opposed to their absolute values) that is important Note that for purposes 
25 of location, any communication back to a BS 122 would require re-synchronizing onto that BS's system time. Although not specified 

in either IS-95 or Tl PI/JTCs PCS CDHA standards, most mobile station manufacturers build correlators with resolutions of 

approximately 1/8 PN chip, which is about 125 nl A location equipped mobile station will provide +/- 125 nS. accuracy, which is 

about + A 125 feet 

The mobile station or location entity on process the arrival time estimates in at least two ways, first the mobile station 
30 may difference the measurements (preferred) to form time-difference-of-arrivals (TDOA); or second, the mobile station may 
determine absolute thne-of-arrival (TQA) by solving for the dock bias between tbe mobile station and other CDHA system time 
reports. TOA requires very well cafibrated BS system docks among each otber. 

Tbe following procedure illustrates significant capabilities hidden in the CDHA standards, which provide a substantial 
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enabling base with which to provide the measurements and data for this inventions' location methods. 

Fi m the BS sends the Neighbor List Update Message, containing a complete Tot of the neighboring pilot PN sequence 
offset indices (Le, via the NGHBRPN field) associated with candidate Bis in the area, with which the mobile station could 
possibly scan for detecting usable earfest arriving neighboring useable BS multipart components. This list should typically be a 

S complete list, as opposed to the presumed candidate subset If the mobile station is not already in the Traffic/Conversation State, it 
could invoke this state by calling a dialable telephone number in the network, e-g- a designed "Quiet Line" This approach also 
allows a billing record to be generated according to routine wireless telephony practice. If the network is to determine location, 
then the network pages the mobile station 140* connecting the mobile station to a Quiet Line/Voice message upon mobile station 
answer. Note that it may be desirable to suppress the mobile station ringer sounding for certain location applications. Other 

10 methods may also be possible. 

During installation, each BS 122 in a particular area is provisioned with the locations of all possible neighboring BSs in 
its area. The BSs 122 use this information to populate a Bst of all Latitudes and longitudes which can be sent to the LUs, using the 
Neighbor List Update message. Second, assuming that the mobile station does not currently have this data or if unknown, then the 
BS shall send a series of MobikStatkm Registered Messages, each message containing the latitude and longitude values (Le., the 

I S BASEJAT and BASE JONG fields) associated with a neighboring BS pilot PN offset sent with the first message. Note that the 

constants Supported Traffic Channel Candidate Active Set size, normally set to 6, and N} m , Supported Traffic Channel 

Candidate Set size, normally set to 5, and Ng^ the Hinimum Supported Neighbor Set size, normally set to 20, should be sufficient 

for most location purposes, however these constants could be changed if the need arises. 

Third, the BS saves the current TADD ami T DROP values in the BS memory, associated with the In-Traffic LU, and 

20 sends the Iff-Tfa^SystmFmmetejiHtss^^hi^ includes reduced TADD and TDROP parameter values, useable for 
location purpose. The value for T ADD would typically be set to a value near the lower end of the B-98 specification, possibly 
below the 80 dB dynamic range requirement, dose to (but not including) the thermal noise power level of the LU receiver. Note 
that if the U) is using restricted lattery, e^, a portable, then the time for keeping T ADD and T DROP at a taw value for location 
estimates purposes, should be kept short to conserve adverse consequences, such as increased current drain and noise. 

IS Reduced T ADD and T DROP values sent to the mobile station will cause the LU to scan all conceivable neighboring BS 

plots provided to it by the BS, and to measure the strengths of each received plot, and to determine the pilot arrival time for each 
pilot offset. Note that the signal strengths now measured may not be sufficient for carrying traffic, but may be sufficient for 
location purposes. 

Assuming the network is to determine location, then the mobile station reports the arrival time, PILOT ARRIVAL for 
30 each plot reported to the base station. According to the standard the arrival time is measured relative to the mobile station's time 
reference (which was previously determined from the active BS), in units of PN chips (I/22B8) microseconds, or about 814 
nanoseconds, as follows: 
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IS 

PILOT PM-PHASE = (PILOT ARRIVAL + (M X PILOT JN))mod 2 . 

where PILOT PN is the PH sequence offset index of the pilot associated with the BS pilot indices in the neighbor list 
hi order to achieve location accuracy estimates on the order of a few hundred feet (or nanoseconds) a higher resolution 
than I PH chip is required. Although not specified directly in IS-95, most mobile manufacturers use correlators with resolutions of 
5 approximately 1/8 PN chip, or about 102 rtS {suggesting that if no other systemk errors are present, about 102 feet of error is 

expected). Note that the search window size SRCH_WIH_A r for each pilot may need to be increased if there are substantial delays 

experienced from the environment It is desirable for the mobile station to report the second and third arrival time (or the second 
and third fingers), and their relative signal strengths, corresponding to each detectable Pilot Channel. 

If more than one PILOT ARRIVAL is available then a bask TDOA multibteration algorithm may be invoked, at either 
10 the 10, or the network. In the network case, the active BS 122 must send a Pilot Request Order for Pilot Measurement Request 
Order (ORDER code 010001), which causes the mobile station 140 to forward its measurements to the BS (and consequently the 
network, as appropriate). 

At this point a minimally sufficient number of measurements are available to perform a location estimate. Thus the BS 
should restore the original T ADD and T DROP values (previously saved in the BS memory) to the mobile station, via the //;- 

15 T/affkS/stmftometmn&agi' 

Additional information may be desirable, such as the active BT TOA measurement, as well as associated BS 
measurements of the mobile station's TOA to their BS location. This added information may be sent to the mobile station H the 
mobile station is to perform location, via the Data Burst Mtssapm the Forward Traffic Channel Since 26 combinations of data 
bant types have been reserved for future use m the standard, dedication of several combinations could be used to telemeter 
20 location- related data. In cases where duplicate ranging or other information is available, various supervisor techniques mentioned 
elsewhere in this document, could be used to refine the location estimate. 

Once the location estimate has been performed, any number of means could be used to provide the results to the end 

user. 

The IS-95 and J-STD-008 CDMA specifications require that BSs should be synchronized to within + /- 3 microseconds of 
25 CDMA system time and shall be synchronized to within + /- 10 microseconds. This invention disclosure method assumes the cost of 
GPS receivers is relatively small, tins time calibration at a more precise calibration level at each location BS is recommended to be 
used by using the very accurate QK time parameter! Preferably the absolute error deviation among surrounding or neighboring 
base stations should be less than 800 nanoseconds, however in most cases this should not be a fixed requirement, but rather a 
preference. In cases where absolute BS timing b prohibitively expensive, then the "Forced Hand-ofr method discussed below an be 
30 asedto overcome the preferred, or strkt absolute BS timing requirements. 

Three methods have been currently identified. Seme of these techniques apply to other air interface types as welL 
I. Use the first finger at BS (Absotate Ranging), and if detedeable, invoke a 'Forced Hand-off" between the mobile station and a 
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netgbboring BS, for a time sufficient to complete signal measurements between a mobile station transmitter and a BS 
receiver, and if possible, between a BS transmitter and a mobile station receiver, which gives access to as many BS's 
as an be detected either by the mobile station receiver or the surrounding BS receivers. 
L Use the first finger at mobile station (Differential Banging) to obtain differential time readings of pibt channel from mobile 
5 station 

3. Use the Pilot Power Level Heasurements and Ground Clutter (Stochastic information) 

Now in the general case where three or more BSs can either determine TDOA and/or the mobile station an telemeter 

such data to the location entity within the network, repeat this method for BS} and BS3. and BS3 and BS| , in order to determine 

the remaining curves, thus yielding location within a 20 space. In the case of 3D geometry (such as a multi-story building with 
1 0 multi-floor pko BS cells), the process must be repeated a fourth time in order to determine altitude. 
HATLAB HathWorks code to implement the above algorithms follows: 
deanbold off; 

i = 

step_sia = 0.03; 

15 

# Set up BS variables 
theta = pi/3*ones(3»l); 
D = I0*ones(3,l); 
2(1) = 0; 

20 *P)=D(I); 

i(3) = D(3)*exp(.jtheta(l)); 

# Define the distance parameters 

25 locationl = Q; 

locatbn2 = Q; 
locatioctf = Q; 

# Iterate and solve for the location with 1 respect to the first BS (at (0,0)) 
30 t2 = -pc0.05A05; 

for t | =^.-0.05.^05, 
tl -tl+OOOl; 

rl = !7(expO*tlH«p(jt2)) .♦(D(IH(l)*eipO i> t2)); 
r2 = IT(ttpO*tlHip(it2)) *(D(IH(l)*expO*tl)); 
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temp = arg(rl); 

index - find(abs(temp) == min(abs(temp))); 
locationl = JlocalKn)^lfmttet)*«p(j*tl)]; 
end; 

for tl = -pi/3:0.05^).re 
tl =tl +0.001; 

rl = t7(exp(i»tl)^0*^)).*(D(2)^P)*exp(i*t2)); 
a = l7(exp(j*tl)^pO*t2))*(DP}^P)*«pO*tl)); 
temp = arg(rl); 

index = find(abs(temp) = - min(abs(temp))); 
location} = pcot»n2^l(mdex)*atp(j»tl)J; 
end; 

(or tl = -pi/3 AC&dOS 

tl =ti+aooi; 

rl = I7(cxp(j*tl)-«p0*t2)) .•(D(l)-d(3)*exp(j*a)); 
r2 = IV(eip(|*tl)-«pfl»t2)) .•(D(l)-d(3)*expGni)); 
temp = arg(ri); 

index — find(abs(temp) = = mm(abs(temp))); 
location* = pocalion3?l(imtot)»exp(j*tl)]; 
end; 

locatkm2 = location2*exp(j*arg(2P)-i(2))) + z(2); 

locations = location3*exp0*arg(i(l)-2(3))) + i(3); 

setyrange f-IOtl]; 

setxrange [-1:11); 

plot([z3(l)D 

hold on 

piot(locatiool) 

plot(location2) 

plot(locatK)n3) 


WIRELESS LOCATION DATA COLLECTION 

tt is worthwhile to discuss tedmsqnes for both obtaining the initial colfeoion oi verified location data, as well as how 
additional location data cask obtained for updating the data in this data base in a straightforward cost-effective manner. 

Regarding both the obtaining of the initial collection of verified location data as well as gathering data updates, k is 
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believed that some of this data can be obtained from the initial and continued engineering of the base station infrastructure by the 
wireless telephony service providers) m the radio coverage area. Additional verified location data an be obtained by trained 
technicians driving and/or walking certain areas and periodically, at each of a plurality of locations: (a) determining a location 
estimate (using, for example, GPS if possible and/or offsets from GPS readings); and (b) using an mobile station 140 at the location 
S to generals location data communication with the wireless base station infrastructure. 

Alternatively, h is a novel aspect of the present invention that a straightforward method and system for gathering 
verified location data has been discovered, wherein a conventional mobile station 140 can be used without any additional 
electronics or circuit modifications. One embodiment of this method and system utilizes the personnel of businesses that travel 
predetermined routes through the radio coverage area (eg., a delivery and/or pickup service) to generate such data using a 
10 conventional mobile station 140 while traversing their routes through the radio coverage area. One example of such personnel is 
the postal workers, and in particular, the mail carriers having pi^ttrmined (likely repetitive) routes for mail pickup and/or 
delivery at predetermined sites (denoted hereinafter as "mail pkkupAiefivery sites'* or simply "mail sites"). By having such mail 
carriers each carry a conventional mobile station 140 and periodically generate location data communication with the wireless 
base station infrastructure at mail sites along their routes, additional verified location data an be added to the Location Data 
15 Base 1129 cost effectively. 

To describe how this can be performed, a brief description of further features available in a typical mobile station 140 is 
needed. At least some modules of mobile station 140 have the following capabilities: 

(272J) a unique mobile station 140 identification number, in fan, every mobile station 140 must have such a number 
(its telephone number); 

20 (1722) the mobile station 140 has a display and a display memory for presenting stored data records having 

telephone numbers and related data to a user. Further, some portion of each data record is annotation and some portion is able to 
be transmitted to the wireless base station network. In particular, the mobile station 140 is able to store and recall data records of 
sufficient size such that each data record may include the following information for a corresponding mail pkkupAfelivery site along 
a mail route: (a) an address or other textual description data (eg., an English-like description) of the mail pickup/delivery site; (b) 

25 a predetermined telephone number; and (c) a numerical code (denoted the "site code** hereinafter) associated with the mail 
pickup/delivery site, wherein the ute code is at least unique within a set of site codes corresponding to the mail sites on the mail 
route. In one embodiment, the memory may store 99 or more such data records, and the display is scrollable through the data 
records; 

(2723) the mobile station 140 can have its display memory updated from either an RS232 port residing on the mobile 
30 station, or from an over-the-air activation capability of the wireless network; 

(272.4) the mobile station 140 has a pause feature, wherein a telephone number can be dated, and after some 
predetermined number of seconds, additional predetermined data can be transmitted either through additional explicit user 
request (e^„ a "hard pause"), or automatically (e^., a "soft panst"). Moreover, the additional predetermined data can reside in 
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the display memory. 

Assuming these features, the following steps can be performed for acquiring additional verified location data: 
(27 JJ) for (at least some of the) postal carriers having predetermined routes of addresses or locations visited, the 
postal carriers are each provided with an mobile station MO having the capabiBties described in (Till ) through (27 2 A) above. 

5 wherein the memory in each provided mobile station has a corresponding list of data records for the addresses visited on the route 
of the postal carrier having the mobile station. Horeover, each such list has the data records in the same sequence as the postal 
carrier visits the corresponding mail sites, and each data record includes the information as in (2722) for a corresponding mail 
she the postal carrier visits on his/her mail route. Hore precisely, each of the data records has; (a) a description of the address or 
location of its corresponding mail pkkupAWvery she, (b) a telephone number for dialing a data collection system for the location 

1 0 center l42.(or, alternatively, a reference to a memory area in the mobile station having this telephone number since h is likely to be 
the same number for most data records), and (c) a site code for the mail pickup/delivery she that is to be transmitted after a 
predetermined soft pause time-out Note that the corresponding list of data records for a particular postal route may be 
downloaded from, for example, a computer at a post office (via the RS232 port of the mobile station 140), or alternatively, the list 
may be provided to the mobile station 140 by an over-the-air activation. Further, there are various embodiments ol over-the-air 

15 activation that may be utilized by the present invention. In one embodiment, the postal carrier dais a particular telephone number 
associated with data collection system and identifies both him/herself by his/her personal identification number (PIN), and the 
postal route (via a route identifying code). Subsequently, the mail pickup and delivery sites along the identified route are 
downloaded into the memory of the mobile station 140 via wireless signals to the mobile station 140. However, additional over- 
the-air techniques are also within the scope of the present invention such as: 

20 (a) If the postal carrier's route is already associated whh the carrier's PIN for over-the-air activation, then the carrier may only 
need to enter his/her PIN. 

(b) If the mobile station 140 is already associated whh a particular route, then the carrier may only need to activate the mobile 

station 1 40, or alternatively, enter his/her PIN for obtaining an over-the-air download of the route. 

(c) Regardless of bow the initial download of mail sites is provided to the mobile static n 140, it is also an aspect of the present 
25 invention that if there are more mail sites on a route to sufficient memory to store corresponding data 

records in the mobile station, then the data records may be downloaded in successive segments. For example, if 
there are 150 mail she on a particular route and storage for only 99 data records in the mobile station, then in one 
embodiment, a first segment of 98 data records for the first 98 mail pkkopAie!ive7 sites on the route are 
downloaded together whh a 99* data record for transmitting an encoding requesting a download of the next 52 
30 data records for the remaining mail sites. (Alternatively, the data collection system may monitor mobile station 

140 requests and automatically detect the last location capture request of a downloaded segment, and 
ub5eqtjeftJy automatically download the oext segment of mail site data records). Accordingly, when the data 
records of the fast segment have been utilized, a second segment may be downloaded into the mobile station 140. 
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Moreover* at the end of the last segment, the datacodectioo system nay cause the first segment for the route to be 
automatically downloaded into the mobile station 140 in preparation for the next traversal of the route. 
(27 J 2) Given that a download into the mobile station 140 of (at least a portion of) the data for a postal route has occurred , 
the postal carrier traversing the route then heratively scrolls to the next data record on the list stored in the 
mobile station as he/she visits each corresponding mail pickup/delivery site, and activates the corresponding data 
record. That is, the following steps are performed at each mail pickup/delivery she: 

(a) As the postal carrier arrives at each mail pickup/deBvery she, he or she check the scrollable mobile station 140 display to 
assure that the address or location of the mail pickup/ielrvery she is described by the data record in the portion of 
the mobile station display for activating associated data record instructions. 

(b) The postal carrier then merely presses a button (typically a "send" button) on the mobile station 140 for concurrently dialing 

the telephone number of the data collection system, ami initiating the timer for the soft pause (in the mobile 
station 140) associated with the she code for the mail pickup/delivery she currently being visited. 

(c) Oven that the soft pause is of sufficient length to allow for the data collection system call to be setup, the mobile station 140 

then transmits the she code for the present mail pickup/tie livery site. 
15 (d) Upon receiving the telephone number of the mobile station 140 (via automatic number identification (AIN)) t and the she code, 
the data collection system then performs the following steps: 
(dl) A retrieval of an identifier identifying the route (route id). Mote this nay be accomplished by using the telephone number of 
the mobile station. That is, when the data collection system first detects that the mobile station 140 is to be used 
on a particular route, the telephone number of the mobile station and the route id may be associated in a data base 
M so that the route id can be retrieved using the telephone number of the mobile siation. . 

(d2) A retrieval of a location representation (e^., latitude, longitude, and possibly height) of the mail pickup/delivery she 

identified by the combination of the route id and the she code is performed by accessing a data base having, for 
each mail she, the following associated data henu: the route U for the mail she, the she code, the mail sw 
(or location description), and the mail she location representation (e.g„ latitude, longitude, possibly height). 
25 (dJ) A request to the location center 142 is issued indicating that the location data for the mobile station 140 (resulting from, 
e^ the call being maintained between the mobile station and the data collection system) is to be retrieved from 
the wireless network, temporarily saved, and a location estimate for the mobile station is to be performed. 
Accordingly, the data collection system request to the location center 142 the following: 
(i) the telephone number of the mobile station 140; 
30 (5) the retrieved location of the mobile station 140 according to the route id and she code; 

(Hi) a request for the location center 142 to perform a location estimate on the mobile station 140 and return the location 

estimate to the data collection system; 
(") a request that the location center 142 retain the location fonhe mobile 
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nation 140 and associate with it the location of the mobile station 140 received from the dan collection synem. 
Regarding step (in), the location estimate may aho include the steps temporarily increasing the mobile station 
transmitter power level 

(2733) Subseqtiertly.grventbat the location center 142 performs as requested, when the data collection system receives the 
mobile station 140 location estimate from the location center, the data collection system first associates the returned mobile 
station location estimate with the corresponding data collection system information regarding the mobile nation, and 
secondly, performs "reasorabifity" tens on the information received from the mobile station 140 for detecting, filtering 
and/br alerting systems and personnel whenever the postal carrier appears to be transmitting (via the mobile nation 140) 
from a location different from what the route id and she code indicate. The following are examples of such reasonabilhy tests: 
(ajHadn^numberofpstalca^ 

(likely dependent upon area type), then tag these particular transmittals as problematic and mark all transmittals 
from the mobile station 140 as suspect for "distance" inaccuracies. 

(b) If there is less than a threshold amount of time between certain postal carrier traramhtals. then tag these particular 

transmittals as probtematk and mark all transmittals from the mobile station 140 as suspect for "time" 
inaccuracies. 

(c) If an expected statistical deviation between a sampling of the postal carrier transmittals and the location eniraates from the 

location center 142 vary by more than a threshold amount, then tag these particular transmittals as problematic 
and mark all transmittals from the mobile nation 140 as suspect for "statistical" inaccuracies. 

(d) H an expected statistical deviation between a sampling of the times of the postal carrier transmittals and an expected timing 
20 between these transmhtals vary by more than a threshold amount, then tag these particular transmittals as 

problematic and maritall transmrttah from the mobile station 140 as suspeo lor "statistiar iraauracies. 
(273.4) When suspect or problematic mobile nation location information isdetected (e.g, incorrect she code) in nep (2733). the 
data collection system may perform any of the following actions: 

(a) Wert the postal carrier of pbtematic and/br suspected maccuracies in real time, after a certain number of trammhtals or at a 
25 btertjme. Note that such akm as well as pwhire leedbadt at the end ol the postal carrier's rotitt (or wgmenu 

thereof) ^ be advantageous in that h fikely rahibits the postal carrier from experimenting with transmittals from 
locations that are purposefully man/ate, but at the same time provides sufficiently timely feedback to encourage 
a consdendous postal carrier. 

(b) Mert the Postal Service of perceived discrepancies in the mobile station 140 traramhtals by the postal carrier. 
JO (c)Dhr^ location center techr^m 

(2735) If the tnasauttal(s) from the noble station 140 are not suspect, then the data coltectioo system communicates with the 
btatJoo center 142 for requesting that each locanon received from the mobile station 140 be stored with its corresponding 
retr^bcat»n(ol>ta^ DataBase 1129. Alternately, H the 
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transmittals from the mobile station 140 are suspect, then the data colleaioD system nay communicate with the location 
crater 142 for requesting that at least some of the location data from the mobile station 140 be discarded. 

Note that a sfcuiar or identical procedure to the steps immediately above may be applied with other services/workers 
such as courier services* delivery services, meter readers, street sweepers, aid bus driven having predetermined routes. 

5 WIRELESS LOCATION APPLICATIONS 

After having determined wireless location from a base technology perspective, several applications are detailed below, 
which provide the results of the location information to a variety of users in various channels and presentation schemes, for a 
number of useful reasons and under various conditions. The following applications are addressed: (I.) providing wireless location to 
the originator or another, using either the digital air interface voice channel or a wireline channel, and an automatic call 

10 drstrfoutor; (2.) providing wireless location to the originator, or another, using either the digital air interface voice channel or a 
wireline channel, and a hunt group associated with the central office or a PBS group; (3.) providing wireless location to the 
originator or another, using either the digital air interface text paging, or short message service communications channel; (4.) 
providing wireless location to the originator or another, using the Internet, and in one embodiment, using netcasting or "Push** 
technology; (5.) selective group, multicast individualized directions with optional Conferencing; (6.) rental car inventory control 

15 and dispatch; (7.) vocalized directions and tracking; (8.) wireless location and court ruling/criminal mcarceration validation; (9.) 
flexible delivery of wireless location information to public safety answering points; (10.) trigger-based inventory and tracking; (II.) 
group, <Lg„ family, safety and mndmoial notification; (II) wireless location-based retail/merchandising services; (13.) location- 
based bonWWfkeAehide security management; (13.) infrastructure-supported wireless location using hand-actuated directional 
finding; (14.) infrastructure-supported intelligent traffic and highway management; (IS.) Parametric-driven intelligent agent- 

20 based location services. Each of these wireless location applications is discussed in detail below. 

Referring to Fig. 36, a user (the initiating caBer) desiring the location of a target mobile station 1 40a, such as a user at 
a telephone station 1 62 which b in communkation with a tandem switch 489 or a oser of an mobile station 140b, or any other 
telephone station user, such as a computer program, dials a pubGcly dahblf telephone number which terminates on the automatic 
call distributor S46 (ACD), associated with the location center 141 If the oiler originated from an mobile station 102, then the all 

25 biwessedraatase station 122 tea w 

PSTN 124 via an interoffice trunk interface 600. The PSTN 124 completes the call to the ACD 546, via a trunk group interface 500. 
Note that the initiating caller could access the ACD S46 in any number of ways, including various Inter-LATA Carriers 492, via the 
pubfic switched telephone network (PSTN) 124. The ACD 546 includes a plurality of telephone network interface cards 508 which 
provide telephony channel associated signaling functions, sub as pulse dialing and detection, automatic number rdemtfication, 

30 winking, flash, off-hook voice synthesized answer, dual tone mutt frequency (OTHf) detection, system intercept tones (Le„ busy, 
no-answer, out-of-servke), disconnected, cat) progress, answer machine detection, text-to-speech and automatic speech 
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recognition. Note that some of these functions may be implemented with associated digital signal processing cards connected to the 
network cards via an internal bus system An assigned telephone network interface card S08 detects the incoming call, provides an 
off-book (answer signal) to the calling party, then provides a text to speech (ITS) message, via an assigned text-to-speech card 512 
indicating the nature of the call to the user, collects the automatic number identification information if available (or optionally 

5 prompts the caller for this information), then proceeds to collect the mobile identification number (HIN) to be located. HIN 

collection, which is provided by the initialing caller through keypad signaling tones, can be achieved in several methods. In one case 
the network card 508 can request a TTS message via text-to-speech card 51 2, which prompts the initiator to key in the HIN mmber 
by keypad DTHF signals, or an automatic speech recognition system can be used to collect the HIN digits. After the HIN digits have 
been collected, a location request message is ant to a location application 146. The location application 146, in concert with 

10 location application interface 135, in the location system 42, is in communication with the location engine 139. Note that the 
location engine 139 consists of the signal processing subsystem 20, and one or more location estimate modules, Le„ DA module 10, 
TOA/TDOA mocuJe 8 or HBS module 6. The location engine 139 initiates a series of messages, using the location application 
programming interface 136 to the mobile station 108. The location application programming interface 136 then communicates with 
one or more mobile switch centers 108, to determine whether or not the mobile station 140 to be located can be located. Conditions 

15 regarding the locateabilrty of an mobile station 140 include, for example: mobile station 140 powered off, mobile station 140 not in 
communication range, mobile station 140 roaming state not known, mobile station 140 not provisioned for service, and related 
conditions. If the mobile station 140 cannot be bated then an appropriate error response message is provided to the initiating 
caller, via e-mail, using the web server 464 in communications with the Internet 468 via an Internet access channel 472 or 
alternatively the error response message may be sent to a text to speech card 512, which is in communications with the initiating 

20 caller via the telephone interface card 508 and the ACD 546, which is in communication via telephony interface circuits 500 to the 
PSTN 124. 

Note that in cases where rendering location estimate information is required on the Internet, the web server cna include 
the provision of a digital certificate key, thus enabling a secure, encrypted communication channel between the location web server 
and the receiving client One such digital encryption key capability is a web server provided by Netscape Communications, Inc. and 

25 a digital certificate key provided by Verisign, Inc. both bated in the state of California, Ui JL 

The PSTN 124 completes routing of the response message to the initiating caller via routine telephony principles, as one 
skilled in the art will understand. Otherwise the mobBe station 140 is bated using methods described in greater detail elsewhere 
herein. At a high level, the mobile switch center 1 12 is in communication with the appropriate base stations 1 22, and provides the 
location system 42 with the necessary signal and data results to enable a location estimation to be performed by the location engine 

30 139. Once the location has been determined by the location engine 139 in terms of Latitude, Longitude and optionally height if 
known (in the form of a text string), the resdt is provito by to the initiator by ^ 

speech card 512, in commuikation with the assigned telephone interface card 508, via the automatic control distributor 546, 
completes the communication path and location response back to the initiating user via the telephone interface 500 to the PSTN 
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124, and from the PSTN 124 to the initiating user. 

Alternatively the baton results from the location application 146 could be provided to the initialing caller or Internet 
user via a web server 464 in communication with the Internet 468, via an Internet access channel 472 and a firewall 474. In 
another embodiment, the location results determined by the location application 146 may be presented in terms of street addresses, 

S neighborhood areas, building names, and related means familiar to human users. The alternative location result can be achieved by 
previously storing a relationship between location descriptors familiar to humans and Latitude and Longitude range values in a 
map database 538. Daring the location request the location application 146 accesses the map database 538, providing it with the 
Latitude and Longitude information in the form of a primary key which is then esed to retrieve the location descriptor familiar to 
humans. Note that to those skilled in the art, the map database 538 and assocoted messaging between the map database 538 and 

1 0 the location application 146 can be implemented in any number techniques. A straightforward approach includes defining a logical 
and physical data model using a relational database and designer environment, such as "ORACLE 2000" for the design and 
development, using a relational database, such as the "ORACLE 73" database. 

In an alternative embodiment, the location application 146 may be internal to the location system 142, as one skilled in 
the art will understand. 

15 Referring to fig. 37, a user - the initiating caller, such as an mobile station 140b or desiring the location of an mobile 

station 140a, signals to the primary base station 122, in connection with the mobile switch center 108 via transport facilities 176, 
The mobile switch center 1 12 is connected to the PSTN 124, via interoffice trunks 600. The initiating user dials a publicly dialable 
telephone number which is then routed through an end office 496, to a telephone interface can) 247, via a telephone bunt group 
500. The hunt group 500 provides a telephony connection to the interface card 247 associated with the location system 228. The 

20 hunt group trunk interface 500 is provided from an end office telephone switch 496. Note that the initiating caller could access the 
telephony interface card 508, va bunt group trunk interface 500 in any number of ways, including an InterLATA Carrier 492, via 
the public switched telephone network (PSTN) 124. The hunt group trunk interface 500 is in communication with a plurality of 
telephone interface cards 508. The interface cards 247 provide telephony channel associated signaling functions, such as pulse 
dialing and detection, automatic number identification, winking, flash, off-book voice synthesized answer, dual tone multi 

25 frequency (DTHF) detection, system intercept tones (It, busy, no-answer, out-of -service), disconnected, call progress, answer 
machine detection, teit-to-speech and automatic speech recognition. An assigned network interface card 247 detects the incoming 
call, provides an off-hook (answer signal) to the calling party, then provides a text to speech (ITS) message indicating the nature 
of the call to the user, collects the automatic number identification information if available (or optionally prompts the caller for 
this information), then proceeds to collect the mobile identification number (M1N) to be located. HIM collection can be achieved in 

30 several methods. In one case the network card 247 can request a ITS message, generated by a voice synthesizer or text to speech 
card 512, which prompts the initiator to key in the HIN number by keypad tone signals, or an automatic speech recognition system 
can be used to collect the HIN digits. After the HIM digits have been collected, a location request message is sent to an application 
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146 in the location system 41 The app&auoa 146 in location system 42 initiates a series of messages to the mobile switch center 
1 12, and optionally to the home location register 460, to determine whether or not the mobile station 140 to be located an be 
located. If the mobile station 140 cannot be located then an appropriate error response message is provided to the initiating caller, 
via e-mail, test to speech card SI 2, web server 464 in communications with the public Internet 468, or similar means. Ahernativeh/ 
5 the fast known location can he provided, along with the time and date stamp of the last location, including an explanation that 
current location is not attainable. Otherwise the mobile station 140 is located using methods described in greater detail elsewhere 
in this patent At a high level, toe mobile switch center 112 is in communication with the appropriate base stations 122 and 1 22h, 
and provides the location system 42 with the necessary signal and data results to enable a location estimation to be performed by 
the location system 42. Once the location has been determined by the location system 42 in terms of latitude. Longitude and 
10 optionally height if known (in the form of a text string), the result is provided back to the initiator by inputting the location text 
string to a text-to-speech card 512, in amnmrikation with the assigned telephone interface card 508. The interface card 508 then 
provides the audible, synthesized message attaining the location estimate to the initiating caller. Alternatively the location results 
coutd be provided to the initiating caBer via a web server 464 in conrniunkatioB with the Public Internet 468, using standard diem 
request-response Internet protocols and technology, location system 42 access to a geographical information system or other 
15 mapping system could abo be used to further enhance the user understanding of the location on a map or similar graphical display. 

Referring to Fig. 38, a user (the initiating caller) desiring the location of an mobile station 140, such as a wireless user 
140 who has text paging service provisioned, dab a pubficty drabble telephone number, carried to the PSTN 1 24 which terminates 
on an end office 496 based hunt group interface 500, wbkh in turn is in communiQtbn with the location system 142. The mobile 
switch center 112. local tandem 317 and mterUTA Carrier tandem 362 are in communication with the PSTN 124, as those skilled in 
20 the art will understand. Note that the initiating caller coutd also be a wireline user with an ordinary telephone station 162 in 

communication with a local tandem 489, cwmeded to the PSTN 124. The initiating location request user could access the telephony 
interface cards SI2 via the hunt group 500. In other embodiments, including various Inter-LATA Carriers 492, via the public 
switched telephone network (PSTN) 124. The hunt group interface 500 is in communication with a plurality of telephone network 
interface cards 512, which are in communication with the location application 146 . The telephone interface cards 5 12 provide 
25 telephony channel associated signaling functions, such as pulse dialing and detection, automatic number identification, winking, 
flash, oJi-hook too symbestw) answer, dual tone muJti frequency (DTHT) detection, system intercept tones busy, no-answer, 
ott-of-servke), disconnected, all progress, answer machine detection, text-to-speech and automatic speech recognition. Note that 
some of these functions may be implemented with associated digital signal processing cards connected to the network cards via an 
internal bus system. Aa assigned telephony interface card 508 detects the incoming call, provides an off-hook (answer signal) to 
30 the calling party, then provides, if appropriate, a text to speech (ITS) message indicating the nature of the call to the user, collects 
the automatic number idenrifkatnn information if available (or optionally prompts the caller for this information), then proceeds 
to collect the mobile 'idtrtifaDoo lumber (HIN) to be located by sending a location request message to an appKcation 1 46 in the 
beat'™ system 4LTr*norA 
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initiating caller through keypad signaling tones. This N1N collection process can be achieved in several methods. In one case the 
telephony interface card 512 can request a text-to-speech message, generated by a text-to-speech card 512, which prompts the 
initiator to by in the HIN number by keypad tone signals. In another case an automatic speech recognition system can be used to 
collect the HIM digits. In either case after the HIN digits have been collected, a location request message is sent to the location 
S system 141 The location system 42 initiates a series of messages to the mobile switch center 1 12, via the location applications 
programming interface (L-API) 366, and optionally to the home location register 360, to determine whether or not the mobile 
station 140 to be located can in fad la located. Alternatively the last known location can be provided, along with the time and date 
stamp of the last location, including an explanation that current location is not attainable. Conditions regarding the bcateability 
of an mobile station include, for example: mobile ttation 140 powered of I, mobile station not in communication range, mobile 

10 station roaming state not known, mobile station 140 not provisioned for service, and related conditions. If the mobile station 140 
cannot be located then an appropriate error response message is provided to the initiating caller, via the service node for short 
messaging service 367. The service node is in communication with the location system 42 using a common text paging interface 
369. The service node 107 accepts the location text paging message from the location system 42 and communicates a request to 
page the initiating caller via a typical signaling system 7 fink for paging purposes, to the mobile switch center 1 12. The mobile 

I S switch center 1 12 forwards the location text page information to the initiating caller via the appropriate base stations 352 or 354, 
to the initiating mobile station 3S4. Otherwise the mobile station 140 is located using methods described in greater detail 
elsewhere in this patent At a high level, the mobile switch center 1 12 is in communication with the appropriate base stations 352, 
354, and provides tie location system 42 with the necessary signal and data results to enable a location estimation to be performed 
by the location system 41 Once the location has been determined by the bcatioo system 42 in terms ol Latitude, Longitude and 

20 optionally height if known (in the form of a text string). The location result is provided by to the initiator by inputting the location 
text string to the service node for short messaging service 367. The service node is in communication with the location system 42 
using a common text paging interface 369. The service node 367 accepts the location text paging message from the location system 
42 and communicates a request to page the initiating caller via a typical signaling system 7 link for paging purposes, to the mobile 
switch center 1 12. The mobile switch center 1 12 forwards the location text page information to the initiating caller via the 

25 appropriate-base nations 122a or 122b, to the initiating mobile station 140, via a text-to-speech card 512, in communication with 
the assigned telephone interface card SOB. 

Referring to Fig. 39, a user (the initiating user) desiring the location of an mobile station 140, who has a push 
technology tuner 484 associated with the user's client workstation 484, selects the location channel in the area, and further 
specifies the mobile station(s) to be located, with what frequency should the location estimate be provided, and other related 
30 parameters, such as billing information. The user's diem workstation 482 is in communication with the Internet, optionally via and 
encrypted communications channel using, for example, Netscape's SSL 3 mryption/decryption technology. A push transmitter 472, 
connected to the Internet 468 via a web server 464, dHem the diem workstation 482 user's request The transmitter 472 requests 
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location update information for specified mobile identification numbers through a firewall 474 and a publisher 478, in 
coimnuokatioD with a location channel appScation 429 in the location system 42. The location system 42 initiates location requests 
forall mobile station mobile identification numbers for which location information has been subscribed to, theo provides the 
location results to the location channel application 429. 
S The location system 42 initiates a series of messages to the mobile switch center 1 12, via the locatioo applications 

programming interface (L-API) 136, and optionally to the home location register 460, to determine whether or not the mobile 
station 140 orothers, to he heated an m 

time and date stamp of the last location, including an explanation that current location is not attainable. Conditions regarding the 
tocatabilhy of an mobile station 140 include, for example: mobile station 140 powered off, mobile station not in communication 

10 range, mobile station 140 roaming state not known, mobile station 140 not provisioned for service, and related conditions. If the 
mobile station 140 cannot be located then an appropriate error response message is provided to the initiating client workstation, 
via the push technology components location channel application 429, publisher 478, firewall 474, transmitter 472, web server 464, 
pubCc Internet 468, to the cfent workstation 482. A similar commuBkation mechanism is used to provide the subscribed-to client's 
workstation 482 with attained location information. 

IS Note that the location channel could in fart provide a collection of mobile station 140 mobile identification numbers for 

location purposes that are grouped by a particular market and/or customer organization segment for example, location channel 
number I could provide enhanced wireless 9-1-1 service to specific public safety answering points, channel number 2 could provide 
periodic wireless location information of a fleet of taxi cabs belonging to a particular company, to their dispatch operator, channel 
3 could provide wireless location to a control center of a military organization, channel 4 could provide wireless location 

20 information of vehicles carrying hazardous materials, to a control center, and so forth. 

The location channel application 429 provides the location results to the publisher 478, which provides a method of 
adding the new location results to the transmitter, via firewall 474. The firewall 474, provides protection services between certain 
systems and the Internet, such as preventing malicious users from accessing critical computing systems. 

25 The group multicast help, with individualized directions, are those whose are authorized and nearest, with text paging 

message instructions on how to drive or navigate, to reach the initiating distress caller. Alternatively optional voice synthesis 
technology could be used to aid one or more members to have spoken instruction giving directions and/or instructions for each 
member, to help them reach the distress caller. 

Referring to Fig. 40, an individual having a mobile station desires to make a distress call for help, or for some other 

30 reason. The distress caller with mobile station 102 dials a special telephone number, received by base station 1 04, which then sends 
the originating caB setup request to the mobile switch center 108. The mobile switch center 108 routes the originating all through 
the PSTN )l2roanantonmkcaUdistrftiitDr(Aa))ll6.TbeACD 1 16 selects an available telephony interface circuit 120, which 
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answers the call and providing introductory information to tbe oiler, such as a greeting message, progress of service, etc, using a 
voice synthesizer Grant card 124. Note that circuits 120 and 124 may be combined as voice response units. The telephony interface 
circuit 120 collects the automatic number identification information if available in the call setup message or optionally prompts the 
caller for this information. Tim HUt collection process can be achieved in several methods. In one case the network telephony 

5 interface card 120 can request a TTS message, generated by a voice synthesizer card 124, which prompts the initiator to key in their 
MIN number by keypad tone signals. In another case an automatic speech recognition system an be used to collect the HIN digits, 
in cither case after the HIN digits have ban collected, a location request message is sent to the location system 128. The location 
system or location system or center (LC) 128 initiates a series of messages to the mobile switch center 108, via the location 
applications programming interface (L-API) 166, to determine whether or not the mobile station 102 to be located can in fact be 

10 located. If the mobile station 102 cannot be tooted then an appropriate error response message is provided to the initiating caller. 
Otherwise tbe LC 128 determines tbe caller's location via methods discussed elsewhere in this patent While this event is proceeding 
an application in the LS 128 references tbe initiating caller's location subscriber profile database IS8 to determine if the caller 
allows others to locate him or her, and specifka&y which individuals are allowed to be informed of the caller's location. 

Assuming the caller allows location information to be sent out to a select group, then the list of members mobile station 

1 5 identification numbers (HIN)s are extracted from the profile database 1 58, and an application in the LC 1 28 initiates a series of 
messages to the mobile switch center 108, via the location applications programming interface (L-API) 166, to determine the 
locations of each of the users' mobile station mobile identification numbers associated with the member list Regarding those 
mobile station mobile identification numbers nearest the distress alter, each member mobile station is dialed via a control message 
sent from an application in tbe LC 128 to the telephony interface card 120. A voice synthesizer card 124 or text to speech circuit is 

20 also patched in the ailing circuit path, to announce the purpose of the automated call to each member. The ACD 1 1 6 initiates the 
call request to each member via the PSTN 112, which connects to the mobile switch center 1 08, that ultimately rings the member 
mobile station 140 and 148 via base stations 132 and 151 An application in the LC 128 identifies a start and finish location 
destination fetation for a member, based on bis/her current location as being the start location, and the finish location being the 
distress oiler's location at mobile station HIN 101 The application in the LC 128 initiates a trap or similar Internet compatible 

25 protocol universal resource locator (URL) request via the web server/client 162 to the pubfc Internet 163, which terminates on a 
maps, directions web server 164. One such URL known to the authors b Lucent Technologies' http://www jnapsOnUuom, which is 
provided for public use. The map/iirectkns server 164 queries the map base 1 68 via a directions algorithm 170, and returns to the 
initiating http request, the location web server 1 61 with a list of instructions to enable a user to navigate between a start location 
and end location. Referring to fig. 41, the information shown in the columns labeled "Turn #\ "Directions", "And Go", and/or 

30 "Total Hiles", on then be parsed from the http response information. Referring now to Fig. FIG. 40, this information an then be 
sent as a short text message, to the relevant mobile station 148 or 140 via the service node 1 82, using interface 557 to tbe mobile 
switch center 108, and relevant base stations 152 aid 132, assuming each member mobile station has short message service 
provisnneilfthisisntttk initiates an 
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with the Internet 468 via an Internet access interface 471 As those rathe art wifl understand ^ 
typkaDy provided by ao Internet service provider, also there are other methods which could be used to complete the Internet 
connection. The rental car agency contains a workstation or persona) computer SB2 with an Internet access interface 472 to the 
Internet 468. The appfication 146 requests of the location engine to perform a baiion request periodically regarding the mobile 
station 140, with the location response information provided the web server and dient, 464. For each rental car or vehicle 
©maining a mobile station 140, the location, as well as various information about the rental car or vehicle can be ascertained via 
the above described infrastructure. 

An appfication in the botion system operates in conjunction with an application in each public safety answering point 
(PSAP) that together provides various call handling functions to enable the PSAP to perform its work toad efficiently and effectively 
toward unique emergency events unique to a given location. The application pair measures the number of emergency 9-1 - 1 wireless 
calk originating from a particular geographical area or location. Upon exceeding a provisional threshold value T, the application 
pair traps the next incoming call from the same location and provides a call screening function via a play announcement and collect 
d$hs activity. This activity alerts the originating cafe that if their call relates to an incident at a particular location, then they are 
the # X+ 1 th" caller who has already notified the PSAP, and that no further oiler discussion is required. However, if the caller's 
intent (foes not rebte to the incident described above, then the caller is requested to press or say "one", or some similar keypad 
number, which then is collected and causes the caller to be re-routed to the next available PSAP call taker. Alternatively H the 
originating caller does not respond within a short time period, then the call is abo re-routed to the next available PSAP all taker. 
The voice announcement may either be synthesized by a text-to-speech card, or an PSAP operator may store a voice message which 
describes the incident at the above-referenced location. 
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Patent Claims 


Wedaim: 

I. An apparatus for locating a first mobile station for at least transmitting and receiving radio signals, wherein said radio 
signals are received on a forward radio bandwidth and said radio signals are transmitted on a different reverse radio 
S bandwidth, comprising: 

a first wireless network infrastructure for communicating with said first mobile station, said first wireless 
network infrastructure having: 

(Al ) a plurality of spaced apart base stations for communicating via said radio signals with said first 
mobile station, and 

10 (A2) a mobile switching center for communicating with said first mobile station, via sard radio signals 

with the base stations, wherein said mobile switching center also communicates with said 
plurality of base stations for receiving measurements of said radio signals, said measurements 
including: (i) first measurements of said radio signals received by said first mobile station in said 
forward radio bandwidth, and (ii) second measurements of said radio signals transmitted by said 
15 first mobile station in said reverse radio bandwidth; 

a location determining means for beating said first mobile station, wherein said location determining means 
receives said first and second measurements from the mobile switching center for estimating a location of said first 
mobile moon, wherein said estimate is a function of both said first measurements aid said second measurements. 
1 An apparatus for locating a mobile station as claimed in Claim I, further including an interface means between said 
20 location determining means and said mobile switching center, wherein said interface means generates a location 

request for a primaty one of said base stations to which said first mobile signaling means is in communication. 
3. As apparatus for looting a mobile station as chimed in Qaim 1, further including a means for requesting data related 
to additional radio signals between said first mobile station and at least a second wireless network infrastructure 
different from said first wireless network infrastructure. 
25 4. An apparatus for bating a mobile station as claimed in Qaim I, wherein said first wireless network infrastructure is 

capable of communicating at least one of voice and visual information with said first mobile station. 
S. An apparatus for beating a mobile station, comprising: 

a wireless network infrastructure for communicating with a plurality of mobile stations, each said mobile 
station for transmitting and receiving wireless signals, wherein said wireless signals are received in a forward 
30 bandwidth and said wireless signals are transmitted in a different reverse bandwidth, and, said wireless network 

mfrastnaore having a plurality of spaced apart base stations for communicating via said wireless signals with said 
plurality of mobile stations; 
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a location determining means for communicating with said plurality of mobile stations, via said radio signals 
with the base stations, wherein said location determining means communicates with said plurality of base stations 
for receiving measurements related to said radio signals for estimating a beacon of at lean a first of said plurality 
of mobile stations, said measurements including: (i) first measurements of said wireless signals received by said first 
mobile station in said forward radio bandwidth, and (ii) second measurements of said wireless signals transmitted 
by said first mobile station in said reverse radio bandwidth; 

wherein said location determining means estimates a location of said first mobile station using both said first 
measurements and said second measurements. 

6. An apparatus for locating a mobik station as claimed in Oaim 5, wherein said second measurements are determined 

from said wireless signals being received by said base stations. 

7. An apparatus for beating a mobile station as claimed in Claim S, wherein said measurements include at least one of: a 

delay spread, a signal strength, a ratio of energy per bit versus signal to noise, a word error rate, a frame error rate, 
a mobile signaling means, a power control value, a pilot index, a finger identification, an arrival time, an 
identification of said first mobile station for communicating with the wireless network infrastructure, a make ol said 
first mobile station, a revision of said first mobile station, a sector identification of one of the base stations receiving 
said radio signals transmitted from said first mobile station. 

8. An apparatus for locating a mobile station as claimed in Claim S, wherein said radio signals are communicated using 

one oh CDMA, W-CDHA, TDNA and advanced mobile phone service. 

9. An apparatus for locating a mobile station as claimed in Claim 5, wherein said location determining means includes a 

location estimator using time difference of arrival data from said measurements. 

10. An apparatus for locating a mobile station as claimed in Claim 9, wherein said location estimator receives said 
measurements bom a distributed antenna system. 

1 1 . An apparatus for locating a motile station as claimed in Oaim 9, wherein said location estimator receives active, 

candidate and remaining set information from said first mobile signaling means. 
II An apparatus for locating a mobile station as claimed in Oaim I , wherein said location determining means includes: 
a receiving means for receiving first data related to at least one of said first measurements and said second 
measurements between said first mobik station and said wireless network infrastructure; 
activating a first location estimator for outputting a first estimate of a location of said first mobile station when 
supplied with location information from said receiving means, said location information related to the first data; 
outputting said firs estimate of the location of said first mobile station when said first estimate has an extent less 
than or equal to a predetermined size; 

activating a second location estimator for outputting a second estimate of a location of said first mobile station 
when said first location estimator does not provide said iun estimate having an extent less than or equal to a 
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predetermined sire; 

outputting an estimate of the location of aid fim mobile station when said second location estimator provides said 
second estimate. 

13. A method for locating a wireless mobile station, comprising: transmitting, by a first short range transceiver station, a 
status change related to whether the mobile station and said first short range transceiver station are able to 
wireless)/ communicate through a telephony network to a predetermined storage; storing, in said predetermined 
storage, said status of a mobile station, wherein said status has a first value when the mobile station communicates 
with said short range transceiver station as a cordless telephone, and said status has a second valoe when the mobile 
station communicates with a network of base stations, wherein said base stations are cooperatively linked for 
providing wireless communication; detecting, by said first short range transceiver station, a change accessing said 
predetermined storage for determining a location of the mobile station. 

14. A method for locating a wireless mobile station, as cbimed in Claim 13, wherein said short range transceiver is a home 

base station. 

15. A method for beating a wireless mobile station, as cbimed in Claim 13, wherein said predetermined storage is 
accessible via one of: an autonomous notification message and a request-response message. 

1 6. A method for locating a wireless mobile station, as claimed in Claim 13, wherein said predetermined storage is a home 

baton register. 

17. A method for heating a wireless mobile station, as chimed in Claim 13, wherein said predetermined storage includes 
one or more of the following data items related to said mobile station: mobile station identification number, short 
range transceiver identification and mobile switch center identification. 

18. A method for locating a wireless mob3e station, as claimed in Claim 13, wherein said step of accessing includes 
responding to a query of said predetermined storage location using an identification of the mobile station. 

19. A method for looting a wireless mobile station, as claimed in Claim 13, further including providing said status from 
said predetermined storage together with an identification of the mobile station to a mobile station location 
estimator for estimating a location of the mobile station. 

20. A method for location a wireless mobile station, as claimed in claim 17, wherein said step of transmitting further 
includes associating said change with a predetermined fixed location and said short range transceiver identification. 

21. A method for location a wireless mobile station, as chimed in daim 13, wherein said step of accessing includes 
translating the mobile identification number and said short range transceiver identification into a predetermined 
location when the status has said first predetermined value. 

22. A method for location a wireless mobile station, as chimed in daim 13, further including a prior step of provisioning a 
translating database from a customer care system containing the location of the short range transceiver. 

23. A method for locating a wireless mobile station, comprising: receiving data of wireless signals communicated between 
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a mobfe station and a wireless network; detecting, using said first data, that the mobile station is in wireless 
aranrankation with a distributed antenna system having a plurality of antennas connected in series and distributed 
ak»g a signal conducting Hie so that there is a predetermined signal time delay between said antennas and at 
predetermined locations; determining a plurality of signal time delay measurements for signals transmitted between 
the mobile station and a collection of some of said antennas, wherein said signals are also communicated through 
said line; estimating a location of the mobile station using said plurality of signal time delay measurements. 

24. A method for bearing a wireless mobile station as claimed in Claim 23, wherein said step of estimating includes 
correlating each measurement of said plurality of signal time delay measurements with a unique corresponding one 
of said antennas. 

25. A method for bearing a wireless mobile station as claimed in Claim 24, wherein said step of estimating includes: 
identffying a plurality of antennas in said collection using correlation obtained in said step of correlating; 
determining a corresponding signal time delay between the mobile station and each antenna in said collection; 
determining a location of each antenna in said collection; estimating a location of the mobile station using said 
corresponding signal time delays and said locations of each antenna in said collection. 

26. A method for locating a wireless mobile station as claimed in Claim 23, wherein said step of estimating includes 
determining, for said signal time delay measurements, a common signal time delay corresponding to transmitting 
signals from said distributed antenna system to a receiver of the Tint wireless network. 

27. A method for locating a wireless mobile station as daimed in Claim 23, wherein said step of estimating includes using 
an absolute delay time with respect to a pilot channel for a base station on the wireless network. 

28. A method for bating a wireless mobile station as claimed in Claim 23, wherein said step of estimating includes 
performing a triangulation using values related to one of : a signal time of arrival, and a signal time difference of 
arrival for time difference of arrival corresponding to each antenna in said collection. 

29. A method for locating a wireless mobile station, as daimed in Claim 23 wherein said step of estimating includes a step 
of computing a most BWy location of said mobile station using a fuzzy logic computation. 

30. A method for beating a wireless mobile station as claimed in Qaim 23, wherein said step of activating includes 
activating one of: 

(a) a location estimator for determining whether the mobile station h detected by a base station of the 

network, wherein said base station communicates with the mobile station as a cordless telephone; 

(b) a location estimator for estimating a location of the mobile station using location information obtained 

from said distributed antenna system; 

(c) a location estimator for estimating a location of the mobile station by one of: triangulatioo and 

tribteration. 

31. A method for beating a wireless mobile station, comprising: first receiving first signal characteristic measurements of 
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wireless signals communicated between a mobile station and a first network of base stations, wherein said base 
stations in the first network are cooperatively finked by a first wireless service provider for providing wireless 
conununitat^ mobile station to search for a wireless signal from a second network of base stations 

that are cooperatively finked by a second wireless service provider for providing wireless communication, wherein 
said first and second wireless service providers are different; second receiving second signal characteristic 
measurements of wireless signals communicated between the mobile station and said second network of base 
stations; estimating a location of the mobile station using said first and second signal characteristic measurements. 

32. A method for locating a wireless mobile station as claimed in Qaim 31, wherein the mobile station is registered for a 
wireless communication service with the first wireless service provider, and the mobile station is not registered for 
the wireless communication service with the second wireless service provider. 

33. A method for beating a wireless mobile station as claimed in Claim 31 , wherein said step of instructing includes 
transmitting a command to the mobile station for instructing the mobile station to search for a signal from a base 
station of said second wireless service provider in a frequency bandwidth different from a frequency bandwidth for 
communitaiing with the base stations of said first wireless service provider. 

34. A method for locating a wireless mobile station as claimed in Oaim 3 1 , wherein said step of instructing includes 
transmitting a command to the mobile station for instructing the mobile station to hand-off from said first service 
provider to a base station associated with said second service provider, for purposes of performing additional signal 
measurements. 

35. A method for looting a wireless mobile station as daimed in Claim 31, wherein said f irst signal characteristic 
measurements indude measurements for time delay, signal strength pairs of signal communicated from at least one 
of: 

(a) the base stations of said first network to the mobile station, and 

(b) the mobile station to the base stations of said first network, and 

wherein said second signal characteristic measurements indude measurements for time delay, signal strength pairs 
of sfcnab communicated from the ban stations of said second neiworkto the mobile station. 

36. A method for locating a wireless mobile station, comprising: receiving first data related to wireless signals 
communicated between a mobile station and at least a first network of a plurality of commercial mobile service 
provider networks of baa stations, wherein for each said network, there is a plurality of base stations f o r at least 
one of transmitting and receiving wireless signals with a plurality of mobile stations; instructing the mobile station 
to communicate with a second network of the plurality of networks for supplying second data; activating a mobile 
station location estimator, when said first and second data are obtained for providing an estimate of a location of 
the mobile station. 

37. A method for locating a wireless mobile station, as daimed in Qaim 36, wherein said second network includes a 
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second pturafit/ of base stations, wherein a majority of base stations in said second plurality of base stations has a 
location different from the locations of base stations in said first network. 

38. A method for locating a wireless mobile station, as daimed in Claim 36, wherein at least one of said first and second 
data includes signal characteristic measurements of ammunitation with the mobile station for a time interval of less 
than 10 seconds. 

39. A method for locating a wireless mobile station, comprising: first receiving first signal characteristic measurements of 
wireless signals cormnarocated between a mobile station and a first network of base stations, wherein said base 
stations in the first network are cooperatively linked by a first wireless service provider for providing wireless 
communication; instructing a second network of base stations that are cooperatively linked by a second wireless 
service provider for providing wireless communication so that the second network searches for wireless signals from 
the mobile station, wherein said first and second wireless service providers are different; second receiving second 
signal characteristic measurements of wireless signals communicated between the mobile station and said second 
network of base stations; estimating a location of the mobile station using said first and second signal characteristic 
measurements. 

40. A method for beating a wireless mobile station, as daimed in Claim 39, further including a step of requesting the 
mobile station to raise it's transmitter power level to a predetermined level, prior to said step of instructing. 

41. A method for footing a wiretamobfo 

wireless signals communicated between a mobile station and at least a first network of a plurality of commercial 
mobile service provider networks, wherein for each said network, there are a plurality of communication stations for 
at least one of transmitting and receiving wireless signals with a plurality of mobile stations; first activating a 
location estimator for providing a first estimate of a location of the mobile station when supplied with first location 
information from said receiving means, said first location information related to the first data; 
when one oh (a) said first estimate does not exist, ami (b) said first estimate has an extent greater than or equal to 
a predetermined size, the steps (Al) and (A2) are performed: 

(Al) instructing the mobile station to communicate with a second network of tie plurality of networks for supplying 

second data to said receiving means, wherein said second data is related to wireless signals communicated 

between the mobile station and the second network; 
(A2) secoml activating said location estimator a second time for providing a second estimate of a location of the 

mobile station when supplied with additional location information from said receiving means, said additional 

location information related to the second data; 
outputting a least one of the estimates of the location of the mobile station provided by said location estimator 
when said location estimator provides at least one estimate of the location of the mobile station. 

42. A method for locating a wireless mobfe station as daimed in Claim 41 , wherein said additional location information 
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and said first location information are utffized together by said location estimaior. 

43. A method of beating a wirebss mobile station as daimed in Claim 41, wherein said communication stations include 
wireless base stations for one of CDMA, TDMA, and GS& 

44. A method of beating a wireless mobile station as daimed in Claim 43, wherein said communication stations include 
S home base station. 

45. A method of locating a wireless mobile station as daimed in Chim4l ( wherein the mobile station includes one of: a 

CDMA transmitter, a TDMA transmitter, and a GSM transmitter, and a AMPS transmitter. 

46. A method for beating a wireless mobSe station as claimed in Claim 41 , wherein one or more of said activating steps 
mdndes: 

IQ ( a ) ay location estimator for determining whether the mobile station is detected by a communication station 

which communicates with the mobile station as a cordless telephone; 

(b) said location estimator for estimating a location of the mobile station using location information related 

to data from a distributed antenna systtm; 

(c) said location estimator for estimating a location of the mobile station by one of: triangubtion and 
IS triiateratnn. 

47. A method for beating a wireless mobile station as daimed in Qaim 41, wherein said predetermined extent is less than 
one thousand feet 

48. A method for beating a wireless mobile station, comprising: receiving, by a receiving means, first data related to 
wireless signals communicated between a mobile station and at kafl a first network of one or more commercial 

20 mobile service provider networks, wherein for each said network, there is a different plurality of base stations for at 

least one of transmitting and receiving wirebss signals with a plurality of mobile stations; activating a first bcation 
estimator for outputting a first estimate of a location of the mobile station when supplied with location information 
from said receiving means, said bcation information rebtedm the fim data; outputti^ 
bcation of the mobib station when said first estimate has an extent less than or equal to a predetermined size; 

25 activating a second location estimator for outpotting a second estimate of a bcatbn of the mobile station when said 

ftm bcation estimator does not provide said first estimate having an extent less than or equal to a predetermined 
size; outputting an estimate of the location of the mobib station when said second bcatbn estimator provides aid 
second estimate. 

49. A method for beating a wirebss mobib station as daimed in Claim 48 further including a step of instructing the 

30 mobib station to communicate with a second network of the plurality of network for supplying second data to said 

receiving means, wherein said second data is related to wirebss signals communicated between the mobile station 
and the second network. 

50. A method for beating a wirebss mobib station as daimed in Claim 49, wherein said step of instructing includes a 
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step ol instructing the mobile station to hand-off to said second network for synchronizing timing signals and 
performing measurements between the mobile station an said second network. 
SI. A method for beating a wireless mobile station as claimed in Claim 48, wherein one or more of said activating steps 
includes activating one ok 

(a) a location estimator for determining whether the mobile station is detected by one of the base stations 

whkb communicates with the mobile station as a cordless telephone; 

(b) a location estimator for estimating a location of the mobile station using location information related to 

data from a distributed antenna system; 

(c) a location estimator for estimating a location of the mobile station by one of: triangubtion and 

trnateraoofl. 

SL A method for locating a mobile station, comprising: receiving, by said nubile station, a request control message from 
one of a plurality of base stations, wherein said message is received by a receiving antenna of said mobile station; 
the control message providing information related to said message to at least one of a control processor and a 
searcher receiver in said mobile station; determining, using at least one of said control processor and said searcher 
receiver, a plurality of pain of radio signal strength related values and corresponding signal time delays for a 
wireless communication between said mobile station and at least a first of the base stations, wherein for at least 
some of said pairs, said signal time delays are different, and for each pair, said signal strength related value for said 
pair is obtained using a signal strength of said communication at said corresponding signal time delay of aid pair; 
transmitting signals for said pain to one or more of the base stations via a transmitting antenna of said mobile 
station; routing data for at least one of said pain from said one or more base stations to a mobile station location 
estimator for estimating a location of said mobile station. 

53. A method for locating a mobile station, as chimed in Oairo S2, wherein said step of receiving uses one of a CDKA, an 
AMPS, a MAMPS and a TDHA wireless standard. 

54. A method for locating a mobile station, as claimed in Claim 52, wherein said step of determining is performed for a 
wireless communication between said mobile station and each of a plurality of the lose stations. 

55. A method for locating a mobile station, as daimed in Claim 52, wherein each of said signal time delays is included 
widun a predetermined corresponding time deby spread. 

56. A method for locating a mobile station, as daimed in Claim 52, wherein said step of determining includes a step of 
instructing, by said control processor, said searcher receiver to output a plurality of said radio signal strength 
related values for a plurality of fingers resulting from said communication from said first base station to said mobile 
station. 

57. A method for beating a mobfle station, as daimed in Claim 52, wherein aid step of determining includes inputting 
data for said pain to a nodubtorfor modulating said data prior to said step of transmitting. 
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58. A method for boring a mobile station, as daimed in Qaim 57, further including a step of establishing a software 
controllable data connection between said control processor and a mobile station component including at least one 
ot a user digital baseband component and said modulator, wherein said connection inputs said data to said 
component 

59. A method for locating a mobile station, as claimed in Qaim 52 further including a step of providing said data for said 
pairs to a mobile station location estimating system having a first mobile station location estimating component 
using time difference of arrival measurements for locating said mobile station via one of trilateral and 
trianguhtion. 

60. A method for locating a mobile station, as chimed in Qaim 59, wherein said step of providing includes selecting one 
oh said first mobile station estimating component, a second mobile station estimating component using data 
obtained from a distributed antenna system, and a third mobile station estimating component for using data 
obtained from activation of a home base station. 

61. A method for locating a mobile station, as daimed in Claim 60, further including a step of computing a most likely 
location of said mobile station using a fuzzy logic computation. 

61 A method for locating a mobile station, as claimed in Qaim 61, wherein said step of computing is performed by said 
second mobile station estimating component for determining a most fikely floor that said mobile station resides in a 
mufti-story building having a distributed antenna system. 

63. A method for locating a mobile station, as claimed in Qaim 59, further including a step of requesting data for 
additional pairs of radio signal strength related values and corresponding signal time delays for a wireless 
communication between said mobile station and at least a second base station of a commercial mobile radio service 
provider different from a commercial mobile service provider for said first base station. 

64. A method for obtaining data related to wireless signal characteristics, comprising: providing a user with a mobile 
station for use when the user traverses a route having one or more predetermined route locations, wherein one or 
more of the route locations have a corresponding telephone number and a corresponding description stored in the 
mobile station; performing the following substeps when the user visits each of the route locations: activating a call to 
said corresponding telephone number; transmitting a code identifying the route location when the user is 
substantially at the route location; storing an association oh 

(a) signal characteristic measurements for wireless communication between the mobile station 

and one or more base stations, and 

(b) a unique identifier for the route location obtained using said code transmitted by said oil; 
Wherein said stored signal characteristic measurements are accessible using said unique 

identifier. 

65. A method as dined m Qua M, wherein said unque identifier corresponds to one of: (a) an address for the route 
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locaoon, and (b) a latitiflle and bt^hnde of the routs locatioo. 

66. A method as daimed m datm 64, wherein said route is periodically traversed by a user having a mobile station for 
accomplishing said step of performing. 

67. A method as chimed in Qaim 64, wherein said step of storing includes retaining said signal characteristic 
measurements in a data storage for analyzing signal characteristic measurements of wireless communications 
between mobile stations and a wireless infrastructure of base stations. 

68. A method as daimed in Qaim 64, further "mduding, prior to said step of activating, a step of determining, by the 
user, that a display on the mobile station uniquely identifies that said corresponding description of the route 
location is avaBable for calling said corresponding telephone number and transmitting said identifying code. 

69. A method as daimed m Claim 64, wherein said step of storing indudes: obtaining a phone number identifying the 
mobile station; providing said phone number identifying the mobile station to a commercial mobile radio service 
provider in a request for said signal characteristic measurements. 

70. A method as daimed in Qaim 64, wherein said step of storing includes using a phone number identifying the mobile 
station in combination with said transmitted identifying code for determining said unique identifier. 

71. A method as daimed in Qaim 64, wherein said corresponding description indudes at least one of: a textual 
description of its corresponding route location, and an address of its corresponding route location. 

71 A method as daimed in Qaim 64, further including steps of: associating said identifying code for the route location 
and said unique identifier in a data storage prior to performing said step of performing; accessing said data storage 
using said identifying code for obtaining said unique identifier in said step of storing. 

73. A method as daimed in Claim 64, further induding a step of accessing said stored signal characteristic measurements 

for enhancing a performance of a process for locating mobile stations. 

74. A metted as daimed in Qaim 64, wherein at least two of said one or more base stations are in networks of different 
commercial mobile radio service providers. 

75. A method as chimed in Claim 64, further including a step of filtering said signal characteristic measurements so that 
when said signal characteristic measurements are suspected of being transmitted from a location substantially 
different from the route location, said step of storing is one of: (a) not performed , and (b) performed so as to 
indicate that said signal characteristic measurements are suspect 

76. A method as chimed in Qaim 75, wherein said stepof filtering indudes at least one of: (a) determining an amount by 
which an estimated location of the mobile station using said signal characteristic measurements d'rf fen from a 
location of the mobile station obtained from said unique identifier; (b) determining whether a predetermined 
amoontof time has ehpsed between successive performances of said step of activating. 

77. A method far beating a wtrdess mobile station, comprising: 

first receiving first signal characteristic measurements of wireless signals communicated between a mobile station 
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and a first network of base stations, wherein said first signal characteristic measurements includes: 

(a) one or more pain of wireless signal strength related values and corresponding signal time delays for a 

wireless comrnunicalion between the mobile station and at least a first of the base stations; 

(b) data ktettnying operational characteristics of the mobile station including information related to a signal 
5 transmission power for the mobile station and information for determining a maximum transmission 

power level of the mobile station; 
adjusting, for at least one of said pairs, its corresponding wireless signal strength, using said data, thereby obtainmg 
corresponding adjusted pairs, wherein each adjusted pair has the corresponding adjusted signal strength, and 
wherein said adjusted signal strength is an expected signal strength of a predetermined standardized mobile station 
10 transmitter power level having a predetermined maximum transmission power and operating at a predetermined 

uansmission power level; 

outputting second signal daraderistk information, obtained using said adjusted signal strength, to a mobile station 
location estimator for determining a location estimate of said first mobile station. 

78. A method for locating a mobile station as claimed in Claim 77. further including applying sequence of one or more 
15 ugnal [jrocessmgHrttrs to one of: said pairs and saW 

79. A method for locating a mobiie station as claimed in Claim 78. wherein said sequence of fitters is depend™ 1 U P°» a 
corresponding mobile station location estimator. 

80. A method for looting a mobue station as claimed in Claim 79. wherein said sequence of filters is pipelined so that for 
first and second fihers of said sequence, an output of said first filter is an input to said second filter. 

M Bl. A method for beating a mobile station as claimed in Claim 79, wherein said filters include Sobel, Weiner, median and 

neighbor. 

81 A method for locating a wireless mobile station, comprising: 

first receiving first signal characteristic measurements of wireless signals communicated between a mobile station 
and a first network of base stations, wherein said first signal characteristic measurements includes one or more pairs 
B of wireless signal strength related values and corresponding signal time delays for a wireless communication between 

the mobile station and at least a first of the base stations; 

categorizing said pairs into categories according to ranges of signal strength related values and ranges of 
corresponding signal time delays for obtaining a represemationof a frequency of occurrence of said one or more 
pairs in said categories; 

30 apprvmgoiieorinorefiterstosaid representation for one of: (a) reducing characteristics of said representation that 

are expeaed to be hwrrfriently lep 
asigralranmseratio; 
Hipprfaganrjutpwtotaai^ 

85 


SUBSTITUTE SHEET (RULE 26) 


^ 1UM * PCT/US97/15933 

camming a location of the mobile station using said mobile station location estimator. 

83. A method for bating a wireless mobile station as chimed in Claim 82, further including a step of requesting data for 

additional pairs of wireless signal strength related values and corresponding signal time delays for a wireless 
transmission between the mobile station and at least a second base station of a second network of base stations 
different from the base stations of the first network, wherein said first and second networks communicate with the 
mobile station in different signal bandwidth*. 

84. A method for locating a wireless mobile station as chimed in Claim 83, wherein the first network is operated by a first 
commercial mobile radio service provider and the second network b operated by a second commercial mobile radio 
service provider. 

85. A method for locating a wireless mobile station as claimed in Qaim 82, wherein said representation corresponds to a 

histogram. 

86. A method for beating a wireless mobile nation as chimed in Chim 82, further including a step of normalizing one of: 

(a) said pairs, and (b) values corresponding to said output 

87. A method for bating a wireless mobile station as claimed in Chim 23, wherein said step of activating further includes 

the step of applying a fuzzy bgic module which further disaetizes the location estimate provided from one of: 

(a) a location estimator for estimating a location of the mobile station using location information obtained 

from said distributed antenna system; 

(b) a location estimator for estimating a location of the mobile station by one of: tnanguhtton and 

trihtention. 

88. A method for contacting a telephony station, comprising: associating, by a user, a particular telephony number with a 

collection of one or more telephony station numbers of telephony stations with which the user desires to 
communicate when said particular telephony number is called from a predetermined telephony station; receiving 
said particular telephony number from the predetermined telephony station; determining a location of said 
predetermined telephony station and at bast some of said telephony stations having telephony station numbers in 
said collection; selecting a first of said telephony stations having telephony station numbers in said collection, 
wherein said first telephony station is selected according to a location of said predetermined telephony station and a 
location of first tefephony station; trairamng a user desired message to s^ 

89. A method for tocatin a mobile station, comprising: establishing, by a user of a particular mobile station, a collection of 

identities of one or more persons having permission to receive a location of said particular mobile station; receiving 
a request by a first of said persons for locating said particular mobile station; determining a location of said 
partiaihrmobtk station m response to derermined using measurements of wireless 

transmissions between said particular mobile station and a first wireless network of base stations, wherein said base 
stations are cooperatively faked for wirefcsstpnmmnkatbn; outfitting said location to the fust person. 
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90. A method as daimed in Qaim89, wherein said step of determining includes using measurements of wireless 

tramsmissions between said particular mobile statioo and a second wireless network of base stations provided by a 
different commercial wireless service provider from a commercial wireless service provider for the first wireless 
network. 

5 91. An apparatus for locating a mobile statioo as daimed in Claim 3 V further including a means for providing a location 

estimate using the Internet 

91 An apparatus for locating a mobile station as daimed in Qaim 3, further including a means for providing a location 
estimate using the Internet. 

93. An apparatus for beating a mobile station as daimed in Qaim 3, further including a means for providing a location 
10 estimate using digital artiffcate keys and thelntemet 

94. An apparatus for locating a mobile station as daimed in Claim 91, further including a means for providing a location 
estimate using push technology on the Internet 
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FIG. 8: DA Installation Procedure for Wireless Location 
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FIG. 15: CDMA Mobile Station Prior Art 
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FIG. 16: MS Modification for RF Signal Telemetry 
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Figure 17: Location and a Home Base Station 
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Fig. 19: MS at location A, detects BSs 1b, 5c, 2c and 4a 
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Fig. 20: MS at location B, detects BSs 1b and 2a 



Fig. 21: MS at location C, detects only BS 1a 
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